Security audit
persistent-sshfs
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed helper for mounting user-configured SSHFS paths and its sensitive behaviors match that purpose.
Before installing, review the upstream script you download from GitHub, use it only with remote hosts you trust, and be careful with cron/systemd settings so failed SSH auth does not leave repeated long-running attempts. The skill uses your existing SSH keys and exposes remote filesystems locally, so treat configured mounts as sensitive.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.