Security audit
Model Router
Security checks across malware telemetry and agentic risk
Overview
This is a small local model-selection helper with no evidence of hidden data access, persistence, network calls, or credential use.
Before installing, review the models JSON you provide because the router may choose any provider or model listed there, which could affect cost or where prompts are later sent by your surrounding application. Also note the documented --mode auto example appears unsupported by the included script.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.