Security audit
release-checker
Security checks across malware telemetry and agentic risk
Overview
This release-checking skill is coherent and purpose-aligned: it reads repository changes, checks SQL compatibility, and writes reports or converted SQL files, with no evidence of hidden data transfer or persistence.
Install this only for repositories you intentionally want analyzed. Expect it to read changed source/config/SQL files and write Markdown reports or converted SQL files; review generated SQL before using it, avoid repositories containing unmanaged secrets, use trusted branch and output path values, and install sqlglot from a trusted source.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.