l4d2-server

Security checks across malware telemetry and agentic risk

Overview

This skill does what it advertises: it helps manage Left 4 Dead 2 servers, including powerful RCON admin commands that users should handle carefully.

Install this only for servers you administer. Protect the RCON password file, avoid exposing passwords in transcripts or command history, prefer trusted networks or VPN/SSH tunnels for RCON, and manually confirm commands that change gameplay or affect players.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: This script transmits an RCON password and privileged server commands over a raw TCP connection without any user-facing warning or protection, and classic Source/Valve RCON is not encrypted. In the context of a server-management skill, this increases the chance that operators unknowingly expose administrative credentials or issue destructive commands across untrusted networks.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal