Security audit
deepseek
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward DeepSeek-on-RunAPI usage guide with disclosed API key and network requirements.
Before installing, understand that this skill is meant to send prompts and API requests to RunAPI using your RunAPI token. Keep the token in environment variables or a secret manager, and only use the provided base URL when you intend compatible SDK calls to go through RunAPI.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
59/59 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.