Back to skill

Security audit

p-image

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Pruna image-generation helper that sends prompts to Pruna's API and does not show hidden or destructive behavior.

Install only if you are comfortable adding Pruna-related skills and sending prompts to Pruna's hosted API using your PRUNA_API_KEY. Avoid putting secrets, private documents, or sensitive personal data in prompts, and review any optional full-suite install before running it.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (16)

Rp1

Medium
Category
MCP Rug Pull
Confidence
92% confidence
Finding
The skill instructs users to run `npx skills add ...` commands without pinning the `skills` loader itself to a specific version. This creates a supply-chain risk because the fetched tooling may change over time or be replaced upstream, leading to execution of unexpected code during install.

Rp1

Medium
Category
MCP Rug Pull
Confidence
92% confidence
Finding
The skill instructs users to run `npx skills add ...` commands without pinning the `skills` loader itself to a specific version. This creates a supply-chain risk because the fetched tooling may change over time or be replaced upstream, leading to execution of unexpected code during install.

Rp1

Medium
Category
MCP Rug Pull
Confidence
92% confidence
Finding
The skill instructs users to run `npx skills add ...` commands without pinning the `skills` loader itself to a specific version. This creates a supply-chain risk because the fetched tooling may change over time or be replaced upstream, leading to execution of unexpected code during install.

Rp1

Medium
Category
MCP Rug Pull
Confidence
92% confidence
Finding
The skill instructs users to run `npx skills add ...` commands without pinning the `skills` loader itself to a specific version. This creates a supply-chain risk because the fetched tooling may change over time or be replaced upstream, leading to execution of unexpected code during install.

Rp1

Medium
Category
MCP Rug Pull
Confidence
92% confidence
Finding
The skill instructs users to run `npx skills add ...` commands without pinning the `skills` loader itself to a specific version. This creates a supply-chain risk because the fetched tooling may change over time or be replaced upstream, leading to execution of unexpected code during install.

Rp1

Medium
Category
MCP Rug Pull
Confidence
92% confidence
Finding
The skill instructs users to run `npx skills add ...` commands without pinning the `skills` loader itself to a specific version. This creates a supply-chain risk because the fetched tooling may change over time or be replaced upstream, leading to execution of unexpected code during install.

Rp1

Medium
Category
MCP Rug Pull
Confidence
92% confidence
Finding
The skill instructs users to run `npx skills add ...` commands without pinning the `skills` loader itself to a specific version. This creates a supply-chain risk because the fetched tooling may change over time or be replaced upstream, leading to execution of unexpected code during install.

Rp1

Medium
Category
MCP Rug Pull
Confidence
92% confidence
Finding
The skill instructs users to run `npx skills add ...` commands without pinning the `skills` loader itself to a specific version. This creates a supply-chain risk because the fetched tooling may change over time or be replaced upstream, leading to execution of unexpected code during install.

Rp1

Medium
Category
MCP Rug Pull
Confidence
92% confidence
Finding
The skill instructs users to run `npx skills add ...` commands without pinning the `skills` loader itself to a specific version. This creates a supply-chain risk because the fetched tooling may change over time or be replaced upstream, leading to execution of unexpected code during install.

Rp1

Medium
Category
MCP Rug Pull
Confidence
92% confidence
Finding
The skill instructs users to run `npx skills add ...` commands without pinning the `skills` loader itself to a specific version. This creates a supply-chain risk because the fetched tooling may change over time or be replaced upstream, leading to execution of unexpected code during install.

Rp1

Medium
Category
MCP Rug Pull
Confidence
92% confidence
Finding
The skill instructs users to run `npx skills add ...` commands without pinning the `skills` loader itself to a specific version. This creates a supply-chain risk because the fetched tooling may change over time or be replaced upstream, leading to execution of unexpected code during install.

Rp1

Medium
Category
MCP Rug Pull
Confidence
92% confidence
Finding
The skill instructs users to run `npx skills add ...` commands without pinning the `skills` loader itself to a specific version. This creates a supply-chain risk because the fetched tooling may change over time or be replaced upstream, leading to execution of unexpected code during install.

Rp1

Medium
Category
MCP Rug Pull
Confidence
92% confidence
Finding
The skill instructs users to run `npx skills add ...` commands without pinning the `skills` loader itself to a specific version. This creates a supply-chain risk because the fetched tooling may change over time or be replaced upstream, leading to execution of unexpected code during install.

External Transmission

Medium
Category
Data Exfiltration
Content
### Create (async — recommended)

```bash
curl -X POST 'https://api.pruna.ai/v1/predictions' \
  -H 'Content-Type: application/json' \
  -H "apikey: ${PRUNA_API_KEY}" \
  -H 'Model: p-image' \
Confidence
60% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
### Create (async — recommended)

```bash
curl -X POST 'https://api.pruna.ai/v1/predictions' \
  -H 'Content-Type: application/json' \
  -H "apikey: ${PRUNA_API_KEY}" \
  -H 'Model: p-image' \
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
### Create (async — recommended)

```bash
curl -X POST 'https://api.pruna.ai/v1/predictions' \
  -H 'Content-Type: application/json' \
  -H "apikey: ${PRUNA_API_KEY}" \
  -H 'Model: p-image' \
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.