Focus Tree

Security checks across malware telemetry and agentic risk

Overview

The skill appears to use local focus-tracking files as disclosed working notes, with no evidence of hidden, destructive, or external data-handling behavior.

Install only if you are comfortable with the skill creating or updating FOCUS.md and FOCUS-LOG.md in your workspace. Review those files before committing or sharing a project, because they may contain task context or notes from your session.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Confidence: 87% confidence
Finding: The skill instructs the agent to create and modify local workspace files such as FOCUS.md and FOCUS-LOG.md as part of normal operation, but it does not require explicit user consent or a clear warning before persistent writes occur. In environments where file access is broad, this can lead to unintended modification of project state, persistence of sensitive context, or tampering with repository files the user did not expect the agent to change.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal