Security audit

Skills.Skip

Security checks across malware telemetry and agentic risk

Overview

The skill is advertised as narrow coding workflow guidance, but the package contains many unrelated high-impact tools that users should review before installing.

Install only after reviewing the full file list, not just SKILL.md. Treat this as a broad tool bundle with wallet transaction authority, account APIs, scraping, hooks, package installs, and security-testing utilities; do not provide private keys or API tokens unless you intentionally want to use those specific subtools and understand their effects.

SkillSpector

By NVIDIA

SkillSpector could not complete.

VirusTotal

VirusTotal engine telemetry is currently malicious for this artifact.

View on VirusTotal

Static analysis

Detected: suspicious.dangerous_exec, suspicious.prompt_injection_instructions

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: minimax-pdf/scripts/make.sh:79

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: minimax-pdf/scripts/render_cover.js:41

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: minimax-skills/skills/minimax-pdf/scripts/make.sh:79

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: minimax-skills/skills/minimax-pdf/scripts/render_cover.js:41

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: playwright-scraper/index.js:29

Prompt-injection style instruction pattern detected.

Warn

Code: suspicious.prompt_injection_instructions
Location: agentmail/SKILL.md:89

Prompt-injection style instruction pattern detected.

Warn

Code: suspicious.prompt_injection_instructions
Location: bug-bounty/skills/web2-vuln-classes/SKILL.md:375

Prompt-injection style instruction pattern detected.

Warn

Code: suspicious.prompt_injection_instructions
Location: bug-bounty/web3/08-ai-tools.md:424

Prompt-injection style instruction pattern detected.

Warn

Code: suspicious.prompt_injection_instructions
Location: proactive-agent/assets/HEARTBEAT.md:11

Prompt-injection style instruction pattern detected.

Warn

Code: suspicious.prompt_injection_instructions
Location: proactive-agent/references/security-patterns.md:9

Prompt-injection style instruction pattern detected.

Warn

Code: suspicious.prompt_injection_instructions
Location: proactive-agent/SKILL-v2.3-backup.md:179