Security audit
Walkie-Talkie Mode
Security checks across malware telemetry and agentic risk
Overview
This skill is a clearly described WhatsApp voice-reply helper that transcribes incoming audio locally and replies with local text-to-speech audio.
Install only if you are comfortable with WhatsApp voice notes being transcribed and processed by the agent, and with the agent sending both text and voice-note replies. Because the referenced transcription and TTS tools are not included in the reviewed artifact, verify those local tools are from trusted sources before use.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.
