Security audit
Gemini Web MCP
Security checks across malware telemetry and agentic risk
Overview
This skill is a safety-oriented operating guide for a Gemini Web MCP server, with sensitive account and deletion workflows clearly called out for explicit user control.
Before installing or using this skill, confirm you trust the Gemini Web MCP server source it invokes, prefer the narrowest GEMINI_TOOLS profile, and only allow cookie extraction, private chat reads, scheduled-action changes, or deletions when you specifically intended that action.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.