Security audit

Review Sentinel

Security checks across malware telemetry and agentic risk

Overview

This skill performs the review-monitoring work it advertises, with local storage and a Google Places API key that are disclosed and purpose-aligned.

Install only if you are comfortable giving the agent a Google Places API key and keeping local files containing business review data. Prefer the environment variable over the credential file, restrict the API key in Google Cloud, periodically delete old state/report files you no longer need, and keep review replies manual as the skill instructs.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

Confidence: 91% confidence
Finding: The skill explicitly stores persistent local state for businesses and review history, but it does not prominently warn users that data will be written to disk. Persistent storage changes the risk profile because business identifiers, review snapshots, and monitoring history may accumulate over time and be retained longer than the user expects.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The markdown recommends storing the Google Places API key in a local file as a fallback, but gives no safety guidance about protecting, restricting, or avoiding plaintext credential storage. Credentials in predictable local paths are at increased risk of accidental exposure, inclusion in backups, or unintended access by other tools or users on the same system.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.