Security audit
AI绘画提示词优化器
Security checks across malware telemetry and agentic risk
Overview
The supplied security telemetry is clean, and no artifact-backed evidence of harmful or overbroad behavior was available in the workspace.
Based on the available evidence, there is no reason to block installation. Because the target artifact itself was not available in the workspace for full artifact-coherence review, users should still review the skill's displayed permissions and install only if its requested access matches what they expect the skill to do.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.