Security audit
bounded-researcher
Security checks across malware telemetry and agentic risk
Overview
This is a narrow instruction-only research skill that asks agents to gather limited evidence and report bounded next steps, with no executable code or hidden high-risk behavior found.
This skill appears safe to install for bounded research tasks. Use it where the agent is allowed to inspect relevant project files or run validation commands, while keeping a human or supervising agent responsible for implementation and architecture decisions.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.