RedHat File Operations

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:42 PM UTC
• Version:
  1.0.0

Overview

This skill is a disclosed file-operations helper with safety checks, but its activation metadata is malformed and should be fixed before relying on automatic triggering.

Install this only in agents that are constrained to the intended workspace, and require explicit approval for delete, overwrite, recursive, or bulk operations. The publisher should replace the malformed trigger metadata with clear trigger phrases and scope limits.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The manifest declares a triggers section, but the value shown is just `System.Object[]`, which does not communicate what phrases, conditions, or scope activate the skill. This is overly vague for a manifest file because users and routing systems cannot tell when the skill should or should not be invoked.

VirusTotal

65/65 vendors flagged this skill as clean.