Security audit
screenpipe
Security checks across malware telemetry and agentic risk
Overview
This plugin coherently connects an AI agent to Screenpipe so it can search private local work history, with sensitive access disclosed and mutation tools gated by user-directed instructions.
Install only if you want your agent to use Screenpipe as a private work-history memory. Use narrow time ranges and app filters, be careful with remote models because retrieved screenshots/audio/text enter the model context, and review any request that exports video, changes recording, edits memories/meetings/speakers, sends notifications, or creates scheduled pipes.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
60/60 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.