FSB Skill

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed browser-control skill, but it needs careful review because it broadly steers agents into a real logged-in Chrome profile with saved credentials and payment context.

Install only if you intentionally want an agent to control a real Chrome browser. Prefer a separate Chrome profile, keep vault entries minimal, pin fsb-mcp-server to a reviewed version when possible, and require explicit confirmation before purchases, account changes, deletions, permission grants, messages, or public posts.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 94% confidence
Finding: The skill strongly biases the agent to invoke a browser-driving capability for nearly any website-related request, including dynamic, logged-in, or uncertain cases. In a tool that operates the user's real Chrome with existing sessions, cookies, saved credentials, and payment methods, this over-broad escalation increases the chance of unnecessary access to sensitive authenticated context and can turn low-risk information requests into high-risk browser actions.

VirusTotal

61/61 vendors flagged this skill as clean.

View on VirusTotal