Security audit
Review Summary
Security checks across malware telemetry and agentic risk
Overview
The supplied scan signals do not show malicious behavior, and the visible artifacts appear coherent with normal developer-assistant workflows.
Install if the skill's requested tools and credentials match what you intend to let your assistant do. Use least-privileged credentials where possible, review commands before high-impact actions, and treat the pending VirusTotal result as unresolved telemetry rather than a negative finding.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.