Security audit
Affiliate Kol Roi Monitor
Security checks across malware telemetry and agentic risk
Overview
This skill is an instruction-only affiliate ROI reporting helper that may handle sensitive commerce data but does not contain code, persistence, credentials use, or hidden behavior.
Before installing, expect to provide affiliate/order/refund/payout and margin data. Minimize customer identifiers where possible, and treat renewal, fraud, clawback, and payout recommendations as decision support for human review rather than automatic business actions.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.