Security audit

my-computer

Security checks across malware telemetry and agentic risk

Overview

This is a powerful desktop automation skill that fits its purpose, but it needs review because it can affect local files, send data through apps/services, and create scheduled automations with uneven safeguards.

Install only if you want a broad local automation helper. Keep tasks narrowly scoped, require previews before batch file changes, explicitly approve recipients/channels/attachments before anything is emailed or uploaded, review any scheduled task before enabling it, and avoid running the undo script on manifests from untrusted locations. VirusTotal was still pending, so it did not drive this verdict.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Vague Triggers

High

Confidence: 96% confidence
Finding: The skill description is extremely broad and designed to trigger on many generic requests involving files, automation, diagnostics, development, or local compute. Because this skill can directly operate on a user's machine, overbroad activation increases the chance it is invoked in contexts where a narrower, safer skill should be used, leading to unnecessary access to local files, applications, and system state.

Missing User Warnings

Medium

Confidence: 97% confidence
Finding: The Slack examples send data and files to an external service using a webhook URL or bearer token, but the recipe provides no warning that local information will leave the machine. In a desktop-automation skill, this is risky because users may reuse these patterns for sensitive local files or reports without understanding the disclosure boundary.

Missing User Warnings

Medium

Confidence: 98% confidence
Finding: The Mail.app automation example constructs and sends an email with recipients and an attachment automatically, without warning that message contents and local files will be transmitted externally. In the context of an agent that operates on a user's computer, this increases the chance of accidental exfiltration of private local documents.

Missing User Warnings

Medium

Confidence: 91% confidence
Finding: When run with `--action move`, the script automatically moves every duplicate beyond the first without any dry-run safeguard, interactive confirmation, or rollback. In a desktop automation skill operating on a user's local files, a mistaken target directory, weak duplicate heuristic choice, or unexpected file ordering can cause unintended file displacement and disrupt user data organization or workflows.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dynamic_code_execution

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: scripts/undo_operation.sh:42