Seekwell

Security checks across malware telemetry and agentic risk

Overview

The skill is a coherent SeekWell/Membrane integration, but it gives an agent broad authenticated API access that can change or delete remote data without clear confirmation guardrails.

Install only if you are comfortable granting Membrane delegated access to the intended SeekWell account. Before any non-read-only request, require the agent to show the exact endpoint, HTTP method, and payload, and approve POST, PUT, PATCH, DELETE, schedule changes, or workflow-triggering actions explicitly.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Confidence: 89% confidence
Finding: The skill explicitly documents raw proxy requests to the SeekWell API without warning that these requests can directly modify remote data or trigger side effects. In an agent setting, this lowers the barrier to issuing unsafe POST/PUT/PATCH/DELETE requests and can lead to unauthorized or unintended changes if the model infers actions too aggressively.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal