[Nyx Archive] Art Philosophy

Security checks across malware telemetry and agentic risk

Overview

This is a conversational art-coaching skill that openly personalizes feedback from art-related discussions and does not include executable code, system access, or data-export behavior.

Install this only if you want an art assistant that adapts to your creative preferences over time. Treat its personalization as a form of profiling: avoid sharing sensitive personal details unless you want them considered in future creative feedback, and use your agent platform's memory review, reset, or disable controls where available.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill explicitly instructs 'Passive Learning (Always On)' and describes ongoing observation of user preferences, values, and creative philosophy without clear disclosure, consent, retention limits, or user controls. This creates a privacy and profiling risk because sensitive behavioral inferences may be collected and reused invisibly across conversations.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The '/art palette' command reveals that the system maintains a stored 'aesthetic profile' derived from prior observed patterns, but the skill does not clearly warn users that such profiling is being built. Hidden or insufficiently disclosed profiling is dangerous because users may share creative and personal preferences without realizing they are being persistently modeled.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal