Security audit
TRIGGERcmd - Run commands on your computers remotely
Security checks across malware telemetry and agentic risk
Overview
This skill does what it says: it lets an agent list and trigger TRIGGERcmd commands on computers tied to your token, which is powerful but clearly disclosed.
Install this only if you are comfortable letting the agent trigger TRIGGERcmd actions on your registered computers. Prefer a temporary environment variable for the token, keep any token file owner-only, review available commands first, and require confirmation before anything that changes files, services, devices, or system state.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
62/62 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.