Security audit
Tyche Lite — Quick Invoice Preview
Security checks across malware telemetry and agentic risk
Overview
This skill is a local invoice preview helper that reads a user-chosen CSV and has no evidence of hidden transfer, persistence, or destructive behavior.
Use this only with invoice CSV files you intend to process locally, since client names, emails, amounts, and due dates will be displayed. Prefer installing the rich dependency in a virtual environment instead of modifying system Python with --break-system-packages.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
56/56 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.