Security audit
Qmd
Security checks across malware telemetry and agentic risk
Overview
This is a local Markdown search skill that discloses indexing and retrieving files the user chooses to add to qmd collections.
Install only if you trust the qmd upstream project. Add only the Markdown folders you are comfortable letting the agent search and retrieve, avoid indexing secrets or sensitive personal notes, and enable cron/scheduler updates only if you want ongoing background re-indexing.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.