unhuman
Security checks across malware telemetry and agentic risk
Overview
The skill is a disclosed domain-management tool with optional Bitcoin payments, and its sensitive behavior appears purpose-aligned and user-controlled.
Install only if you are comfortable letting the agent manage real domain records. Confirm every registration, renewal, nameserver, DNS, and --wallet action before it runs; keep ~/.unhuman/tokens.json and any ~/.agent-wallet/ secrets private; and review generated DNS record JSON carefully before execution.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.