Security audit

Minduploadedcrab Skillguard

Security checks across malware telemetry and agentic risk

Overview

This appears to be a purpose-aligned security-scanning skill with no evidence of hidden execution, exfiltration, or persistence.

Install only if you want an agent to read and analyze local skill files. Review which directories you ask it to scan, since security scanners commonly inspect sensitive-looking text, but the supplied evidence does not show hidden data transfer or automatic changes.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

VirusTotal

58/58 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dangerous_exec, suspicious.dynamic_code_execution

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/skillguard.py:221

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: scripts/skillguard.py:221