Security audit
Ai Content Creator
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed paid AI content-creation wrapper that sends user-provided content to external providers, with no hidden executable code in the inspected artifact.
Install only if you are comfortable sending prompts, URLs, text, audio, and other media to Spraay and upstream AI providers, and paying USDC per request. Use non-sensitive test inputs first, keep any wallet balance limited, and review costs before multi-step workflows, especially video generation.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.