Security audit
Agent Observability Spec
Security checks across malware telemetry and agentic risk
Overview
This is a markdown-only planning skill for designing LLM observability, with no executable code or hidden install behavior.
Install is reasonable for teams designing LLM or agent monitoring. Before applying its recommendations, decide what prompt, output, tool-result, and user data may be logged, who can access it, how long it is retained, and how deletion or compliance requests are handled.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.