ObjectRemover Video Object Ops

• Outcome: Pass
• Latest audit: May 29, 2026, 8:28 PM
• Version:
  1.0.5

Overview

This instruction-only skill is coherent for AI video object removal, but users should understand that videos and prompts are processed by an external backend.

Install only if you are comfortable sending selected videos, video URLs, prompts, and generated processing data to the ObjectRemover backend. Avoid sensitive, confidential, regulated, or rights-restricted media unless the provider's data handling and retention terms are acceptable, and manually confirm any credit purchase or checkout step.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The skill explicitly supports upload-or-URL video processing against a remote backend, but the user-facing description does not warn that video assets may be transmitted off-platform to an external service. This can cause users to submit sensitive or regulated media without informed consent, creating privacy, confidentiality, and compliance risk.

VirusTotal

63/63 vendors flagged this skill as clean.