Security audit
Wechat Markdown Html Render
Security checks across malware telemetry and agentic risk
Overview
This skill is a small Markdown-to-HTML rendering guide with no executable files included, and the reviewed artifacts show no hidden or unsafe behavior.
Before installing, note that this version appears to be documentation-only and references files that are not packaged, so it may not work until the missing renderer and dependencies are supplied. From a security perspective, the reviewed artifact is low risk; still review any added npm dependencies or script files if you obtain them separately.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
55/55 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.