Memory Defrag

Security checks across malware telemetry and agentic risk

Overview

This markdown-only skill is a disclosed memory cleanup workflow, though users should review any proposed memory edits before allowing pruning or scheduled runs.

Install this only if you want an agent to reorganize its own memory files. Before edits, review the defrag plan, keep a backup, and require explicit approval for deletions, merges, moves, pruning, or any cron-based run that would change files automatically.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 89% confidence
Finding: The skill can be invoked 'on demand' when a user asks to 'clean up, reorganize, or defrag memory,' which is broad language that overlaps with ordinary user requests. In an agentic system, this can cause accidental activation of a destructive or semi-destructive maintenance workflow, leading to unintended pruning, moving, or deletion of memory content without sufficiently explicit user intent.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal