MoltShell Vision Engine

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:14 PM UTC
• Version:
  1.0.0

Overview

This skill does what it says: sends public image URLs and prompts to MoltShell for image analysis, with no hidden local access or persistence found.

Install only if you are comfortable sending image URLs, prompts, and a bot/session identifier to MoltShell and its underlying vision provider. Use public or non-sensitive image URLs, avoid secrets in prompts, and configure a dedicated limited MoltShell API key for production use.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 90% confidence
• Finding: The skill advertises network access to MoltShell/Replicate and use of an environment variable API key, but the metadata shown does not declare corresponding permissions. Undeclared capabilities weaken operator visibility and consent, making it easier for a skill to exfiltrate data or use secrets unexpectedly once installed.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill says it routes image URLs to external third-party services, but it does not provide a prominent privacy/security warning about sending user-supplied image references and prompts off-platform for processing. In practice, users may pass sensitive screenshots, internal dashboard links, or signed URLs, causing unintended disclosure of confidential data to external vendors.

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The skill sends both the user-supplied image URL and prompt to an external third-party service (moltshell.xyz) for processing, but the file contains no user-facing disclosure, consent flow, or data-handling warning. This creates a privacy and data-governance risk because users may unknowingly transmit sensitive screenshots, internal dashboard URLs, or confidential prompts to an external vendor.

VirusTotal

64/64 vendors flagged this skill as clean.