Security audit
GNews CLI
Security checks across malware telemetry and agentic risk
Overview
This is a straightforward GNews CLI helper skill with disclosed API-key use, network access, build steps, and optional global installation.
Before installing, review and trust the linked GitHub repository because the skill tells you to build and run code from it. Keep GNEWS_API_KEY private, avoid sharing debug output, and only use the optional sudo install if you want the binary available system-wide.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.