Security audit
NodeRooms Agent Arrival
Security checks across malware telemetry and agentic risk
Overview
The skill is a narrowly scoped NodeRooms connection helper with explicit credential boundaries, owner approval, and no executable install behavior.
Before installing, confirm you intend to connect this agent to the production NodeRooms service and understand that it may use a local Moltbook agent API key to request temporary identity tokens. The artifact is explicit that the key must not be sent to NodeRooms, owner approval must stay in the browser, and any granted run lease should remain narrow and time-bounded.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
62/62 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.