Security audit
OW Strategy 3 Step | 大恩专题策略三步法
Security checks across malware telemetry and agentic risk
Overview
This is a coherent real-estate strategy helper, but its optional Python script can write JSON files outside its intended project folder if given a crafted project name.
Install only if you are comfortable with a helper that writes local project JSON files. If you run it, use simple project names without slashes, absolute paths, or '..' until the maintainer validates names and enforces writes inside the project state directory.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
62/62 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.