Security audit

Hizal Start

Security checks across malware telemetry and agentic risk

Overview

The skill is a simple Hizal session helper, but it broadly auto-starts or resumes persistent memory sessions for ordinary work without clear user opt-in or scope limits.

Install this only if you want Hizal memory sessions to start or resume automatically at the beginning of normal agent work. Review what Hizal stores, how long it persists, who can access it, and whether your agent should ask before writing task details or decisions to persistent memory.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 92% confidence
Finding: The listed trigger phrases are generic everyday language that commonly appear in normal conversation, making accidental invocation likely. In a session-management skill that calls stateful tools like start, resume, and register actions, this increases the risk of unauthorized context creation, unintended persistence, or workflow hijacking across unrelated tasks.

Vague Triggers

Medium

Confidence: 92% confidence
Finding: The listed trigger phrases are generic everyday language that commonly appear in normal conversation, making accidental invocation likely. In a session-management skill that calls stateful tools like start, resume, and register actions, this increases the risk of unauthorized context creation, unintended persistence, or workflow hijacking across unrelated tasks.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.