Security audit
Frinkiac - Search, browse, and generate memes from The Simpsons, Futurama, Rick and Morty, and 30 Rock scenes
Security checks across malware telemetry and agentic risk
Overview
The skill appears purpose-aligned, but it relies on running an external npm MCP package during setup, so users should verify that package before installing.
Before installing, confirm you trust the npm package publisher and consider pinning or reviewing the MCP package version rather than relying on unpinned npx execution. Treat it like any tool that runs local code, even though the skill artifacts reviewed here do not show malicious behavior.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
60/60 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.