dependency-security-scan
Security checks across malware telemetry and agentic risk
Overview
This documentation-only skill guides Java dependency vulnerability checks and its suggested commands match that purpose.
Install this if you want guided Java dependency security analysis. When using it, run build and scanner commands only in repositories you trust, because Maven or Gradle tasks and vulnerability scanners may inspect project files, download metadata, query public vulnerability APIs, and generate local report files that could include private dependency names or repository details.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.