Grinder's Farm
Security checks across malware telemetry and agentic risk
Overview
The plugin appears purpose-aligned for a local farm game, but it does run local Node/game commands and can start a background auto-advance worker that posts to bound channels.
This looks like a coherent local game plugin rather than a malicious skill. Before installing, be comfortable with running the grinders-farm npm package, using the unsafe-force plugin install flag, and allowing a background worker that can advance the game and send updates to bound channels. Disable autoStartWorkerOnGatewayBoot if you want manual-only behavior.
SkillSpector
By NVIDIA
SkillSpector findings are pending for this release.
VirusTotal
VirusTotal engine telemetry is currently stale for this artifact.