Snatchbot

Security checks across malware telemetry and agentic risk

Overview

This appears to be a real SnatchBot integration, but it grants broad authenticated control through Membrane without clear approval rules for high-impact actions.

Install only if you trust Membrane and intend to let an agent operate on your SnatchBot workspace. Use the least-privileged connection available and require explicit approval before write, delete, broadcast, billing, permission, data export, or API-key actions.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 82% confidence
Finding: The skill description is broad enough to match generic requests about managing data or automating workflows, which can cause over-invocation outside the user's clear intent to use SnatchBot. In an agent system, this increases the chance that the skill is selected for unrelated tasks and then initiates networked actions or credential flows against an external service the user did not explicitly mean to access.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal