Qmd
Security checks across malware telemetry and agentic risk
Overview
This skill is a transparent local Markdown search helper, with expected cautions around installing an external CLI and indexing private notes.
Install only if you are comfortable adding the qmd CLI from the referenced GitHub project. Index narrow Markdown folders rather than broad home or work directories, use collection filters where possible, and enable cron-based updates only if you want ongoing background re-indexing.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.