Bridge

• Outcome: Review
• Latest audit: May 29, 2026 at 9:36 PM UTC
• Version:
  1.0.2

Overview

This is a mostly disclosed Bridge/Membrane integration, but it gives broad authenticated API control, including write and delete requests, without clear confirmation guardrails.

Install only if you trust Membrane and the Bridge connection you will authorize. Use a least-privilege account where possible, verify the correct Bridge API documentation before raw proxy calls, and require explicit confirmation before any POST, PUT, PATCH, or DELETE request.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 86% confidence
• Finding: The skill documents direct proxy requests with support for POST, PUT, PATCH, and DELETE, but does not warn that these methods can mutate or destroy remote data. In an agent context, that omission increases the chance an agent will perform state-changing actions without explicit user confirmation, especially when raw requests are presented as a normal fallback path.

VirusTotal

65/65 vendors flagged this skill as clean.