Security audit
App Store Changelog
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward release-notes helper that reads local git history to draft App Store changelogs, with no evidence of hidden, destructive, credential, network, or persistent behavior.
Install this only for repositories where commit messages, file names, and local repository paths are appropriate for the agent to inspect. Review the generated release notes before publishing to ensure internal details are not exposed.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.