Slite
Security checks across malware telemetry and agentic risk
Overview
The skill appears to be a straightforward BasicOps MCP setup guide, with expected credential and configuration handling disclosed for that purpose.
Before installing, be aware that this skill helps an agent modify MCP configuration and handle a BasicOps API key. Use a scoped or revocable key when possible, prefer secret storage or environment variables, and avoid pasting live tokens into chat unless necessary.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
