Back to skill

Security audit

p-video-avatar

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Pruna video-avatar helper that uploads user-provided media and prompts to Pruna's API after confirmation, with no hidden persistence or destructive behavior found.

Before installing, be comfortable with Pruna receiving the portrait, script, voice settings, and any uploaded audio you provide. Confirm you have the right to use the person's likeness and voice, verify the PRUNA_API_KEY is available only to the intended environment, and consider pinning the referenced Pruna skill installs if you need stricter supply-chain control.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (25)

Rp1

Medium
Category
MCP Rug Pull
Confidence
91% confidence
Finding
The skill instructs users to run `npx skills add ...` without pinning an immutable version or commit. That allows the fetched package or installer behavior to change over time, creating a supply-chain risk where a compromised or newly published package version could execute unintended code in the agent environment.

Rp1

Medium
Category
MCP Rug Pull
Confidence
91% confidence
Finding
The skill instructs users to run `npx skills add ...` without pinning an immutable version or commit. That allows the fetched package or installer behavior to change over time, creating a supply-chain risk where a compromised or newly published package version could execute unintended code in the agent environment.

Rp1

Medium
Category
MCP Rug Pull
Confidence
91% confidence
Finding
The skill instructs users to run `npx skills add ...` without pinning an immutable version or commit. That allows the fetched package or installer behavior to change over time, creating a supply-chain risk where a compromised or newly published package version could execute unintended code in the agent environment.

Rp1

Medium
Category
MCP Rug Pull
Confidence
91% confidence
Finding
The skill instructs users to run `npx skills add ...` without pinning an immutable version or commit. That allows the fetched package or installer behavior to change over time, creating a supply-chain risk where a compromised or newly published package version could execute unintended code in the agent environment.

Rp1

Medium
Category
MCP Rug Pull
Confidence
91% confidence
Finding
The skill instructs users to run `npx skills add ...` without pinning an immutable version or commit. That allows the fetched package or installer behavior to change over time, creating a supply-chain risk where a compromised or newly published package version could execute unintended code in the agent environment.

Rp1

Medium
Category
MCP Rug Pull
Confidence
91% confidence
Finding
The skill instructs users to run `npx skills add ...` without pinning an immutable version or commit. That allows the fetched package or installer behavior to change over time, creating a supply-chain risk where a compromised or newly published package version could execute unintended code in the agent environment.

Rp1

Medium
Category
MCP Rug Pull
Confidence
91% confidence
Finding
The skill instructs users to run `npx skills add ...` without pinning an immutable version or commit. That allows the fetched package or installer behavior to change over time, creating a supply-chain risk where a compromised or newly published package version could execute unintended code in the agent environment.

Rp1

Medium
Category
MCP Rug Pull
Confidence
91% confidence
Finding
The skill instructs users to run `npx skills add ...` without pinning an immutable version or commit. That allows the fetched package or installer behavior to change over time, creating a supply-chain risk where a compromised or newly published package version could execute unintended code in the agent environment.

Rp1

Medium
Category
MCP Rug Pull
Confidence
91% confidence
Finding
The skill instructs users to run `npx skills add ...` without pinning an immutable version or commit. That allows the fetched package or installer behavior to change over time, creating a supply-chain risk where a compromised or newly published package version could execute unintended code in the agent environment.

Rp1

Medium
Category
MCP Rug Pull
Confidence
91% confidence
Finding
The skill instructs users to run `npx skills add ...` without pinning an immutable version or commit. That allows the fetched package or installer behavior to change over time, creating a supply-chain risk where a compromised or newly published package version could execute unintended code in the agent environment.

Rp1

Medium
Category
MCP Rug Pull
Confidence
91% confidence
Finding
The skill instructs users to run `npx skills add ...` without pinning an immutable version or commit. That allows the fetched package or installer behavior to change over time, creating a supply-chain risk where a compromised or newly published package version could execute unintended code in the agent environment.

Rp1

Medium
Category
MCP Rug Pull
Confidence
91% confidence
Finding
The skill instructs users to run `npx skills add ...` without pinning an immutable version or commit. That allows the fetched package or installer behavior to change over time, creating a supply-chain risk where a compromised or newly published package version could execute unintended code in the agent environment.

Rp1

Medium
Category
MCP Rug Pull
Confidence
91% confidence
Finding
The skill instructs users to run `npx skills add ...` without pinning an immutable version or commit. That allows the fetched package or installer behavior to change over time, creating a supply-chain risk where a compromised or newly published package version could execute unintended code in the agent environment.

Rp1

Medium
Category
MCP Rug Pull
Confidence
91% confidence
Finding
The skill instructs users to run `npx skills add ...` without pinning an immutable version or commit. That allows the fetched package or installer behavior to change over time, creating a supply-chain risk where a compromised or newly published package version could execute unintended code in the agent environment.

External Transmission

Medium
Category
Data Exfiltration
Content
### Upload portrait

```bash
curl -X POST "https://api.pruna.ai/v1/files" \
  -H "apikey: ${PRUNA_API_KEY}" \
  -F "content=@/path/to/portrait.png"
```
Confidence
60% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
### Upload portrait

```bash
curl -X POST "https://api.pruna.ai/v1/files" \
  -H "apikey: ${PRUNA_API_KEY}" \
  -F "content=@/path/to/portrait.png"
```
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
### Upload portrait

```bash
curl -X POST "https://api.pruna.ai/v1/files" \
  -H "apikey: ${PRUNA_API_KEY}" \
  -F "content=@/path/to/portrait.png"
```
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
### Upload portrait

```bash
curl -X POST "https://api.pruna.ai/v1/files" \
  -H "apikey: ${PRUNA_API_KEY}" \
  -F "content=@/path/to/portrait.png"
```
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
### Upload portrait

```bash
curl -X POST "https://api.pruna.ai/v1/files" \
  -H "apikey: ${PRUNA_API_KEY}" \
  -F "content=@/path/to/portrait.png"
```
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
### Upload portrait

```bash
curl -X POST "https://api.pruna.ai/v1/files" \
  -H "apikey: ${PRUNA_API_KEY}" \
  -F "content=@/path/to/portrait.png"
```
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
### Upload portrait

```bash
curl -X POST "https://api.pruna.ai/v1/files" \
  -H "apikey: ${PRUNA_API_KEY}" \
  -F "content=@/path/to/portrait.png"
```
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
### Upload portrait

```bash
curl -X POST "https://api.pruna.ai/v1/files" \
  -H "apikey: ${PRUNA_API_KEY}" \
  -F "content=@/path/to/portrait.png"
```
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
### Upload portrait

```bash
curl -X POST "https://api.pruna.ai/v1/files" \
  -H "apikey: ${PRUNA_API_KEY}" \
  -F "content=@/path/to/portrait.png"
```
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Natural-Language Policy Violations

Low
Confidence
86% confidence
Finding
This markdown file includes a concrete example value of `voice_language: "English (US)"`, which can normalize a specific locale choice in the skill instructions. The policy requires avoiding forced language or locale constraints unless the user is offered a choice or the constraint is clearly justified.

Natural-Language Policy Violations

Low
Confidence
86% confidence
Finding
A second sample request specifies `voice_language: "English (US)"`, reinforcing a default locale in the skill's natural-language guidance. Even though the file later says to confirm `voice_language` with the user, the hard-coded examples still present a specific language choice without opt-in.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.