Security audit
Ai Code Review
Security checks across malware telemetry and agentic risk
Overview
This skill is a coherent checklist-style guide for reviewing AI-authored code and does not request hidden access, persistence, or unsafe authority.
Install this if you want an agent to apply a stricter checklist to AI-authored PRs. Expect it to ask for diffs, provenance, test setup, and codebase context, and to recommend verification steps such as checking actual API docs or running linters.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
60/60 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.