Security audit

Parcel

Security checks across malware telemetry and agentic risk

Overview

The skill appears to be a disclosed parcel-management helper, with a deletion feature that fits its purpose but should be used carefully.

Before installing, be aware that the skill may remove tracked parcel entries. Use it only when you can clearly identify the parcel being removed, and require the agent to restate the target and ask for confirmation before any deletion.

SkillSpector

By NVIDIA

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The skill documents a destructive `parcel_remove` capability and browser-driven execution flow without any guidance to require explicit user confirmation, verify the target package, or present a warning before deletion. In an agent context, this increases the risk of accidental or prompt-induced deletion of tracked deliveries, especially because the operation is action-oriented and the browser steps could be followed automatically.

VirusTotal

58/58 vendors flagged this plugin as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.