Security audit
Code Dev
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed Git development workflow guide that can edit a repository and create pull requests, which matches its stated purpose.
Install this only if you want an agent-managed Git workflow. Use it in the intended repository, review branch and PR contents before remote actions, and keep GitHub credentials limited to the permissions needed.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.