Discord Dual Bot Orchestrator

• Outcome: Review
• Latest audit: May 28, 2026 at 9:55 AM UTC
• Version:
  1.0.0

Overview

The skill has a coherent Discord bot setup purpose, but its helper scripts can rewrite persistent bot configuration using loosely validated paths and values.

Review the shell scripts before installing, run them only with trusted simple paths and numeric Discord IDs, keep Discord tokens out of shared files, store backups in a private directory, and avoid using this skill to process untrusted channel or config values until input validation is added.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 92% confidence
• Finding: The skill instructs the operator to create workspaces, write `.env` files, and perform backup/rollback operations, which clearly imply file read/write behavior, yet it declares no permissions. That mismatch can mislead users and enforcement systems about the skill's capabilities, reducing transparency and weakening least-privilege controls around filesystem access.

VirusTotal

64/64 vendors flagged this skill as clean.