Security audit
Wappalyzer
Security checks across malware telemetry and agentic risk
Overview
The inspected skill artifacts are operational and developer-assistance tools with disclosed use of local credentials, APIs, and local memory, and the supplied scans show no malicious indicators.
Before installing, confirm you trust the publisher and only configure API tokens or Slack/Grafana/Axiom/Sentry access that the agent should be allowed to use. Treat write-capable operational helpers, memory sync, and admin/release workflows as powerful tools and review commands before authorizing changes.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.