Security audit
Parliament CLI
Security checks across malware telemetry and agentic risk
Overview
The skill is a coherent read-only helper for querying public UK Parliament data, with no artifact-backed evidence of credential use, persistence, destructive actions, or hidden behavior.
Reasonable to install if you want an agent to query public UK Parliament data. Before installing, verify the npm package and publisher, and do not provide API keys, browser sessions, or other credentials unless you independently confirm they are needed.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.