Security audit
Swagger OpenAPI Production Readiness Audit
Security checks across malware telemetry and agentic risk
Overview
This skill only guides an agent to review user-provided OpenAPI or Swagger specs and shows no hidden installation, persistence, or unrelated access behavior.
Before installing or using it, redact secrets, tokens, private hostnames, and sensitive endpoint details from API specifications when possible. VirusTotal was pending, but artifact review and the clean scanner report found no concrete suspicious behavior.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.