Security audit
Html2md
Security checks across malware telemetry and agentic risk
Overview
This skill does what it claims: it converts user-provided HTML, URLs, or files into markdown without hidden persistence or exfiltration behavior.
Install only if you are comfortable with a CLI that can fetch any URL it is given and read any file path it is given. Do not pass untrusted user-controlled URLs in sensitive networks, and avoid pointing --file at secrets or private files unless you intend their contents to be converted and shown in output.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
49/49 vendors flagged this skill as clean.