Security audit
Deal-sourcing Scout for VCs
Security checks across malware telemetry and agentic risk
Overview
The skill is a clearly disclosed VC deal-sourcing workflow that uses an external paid CLI with wallet-based micropayments, but it requires dry-run price review and user approval before spending.
Before installing, understand that this workflow depends on an external npm CLI and paid third-party API calls funded from your own Circle wallet. Run the free verification step first, review the quoted prices, and only fund or run it if the cost, data sources, and wallet setup match your expectations.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.