Security audit
Alibabacloud Dlf Manage
Security checks across malware telemetry and agentic risk
Overview
The available scan evidence does not show hidden behavior, executable install logic, credential misuse, persistence, or malicious activity.
This appears safe to install based on the available evidence, but VirusTotal was still pending. Install it only if the skill description matches what you expect, and review any setup prompts before granting credentials, filesystem access, or authority to make changes.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.