Security audit
DigitalOcean
Security checks across malware telemetry and agentic risk
Overview
This skill is mostly coherent, but it can trigger DigitalOcean Droplet lifecycle changes while labeling untagged actions as safe to run directly.
Review before installing if this will connect to production DigitalOcean resources. Treat `manage_droplet_lifecycle` as a write action requiring explicit approval, even though the skill does not tag it that way, and only run the remote installer commands if you trust OOMOL and need the `oo` CLI.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
59/59 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.