Security audit
Dont Deal Triage
Security checks across malware telemetry and agentic risk
Overview
This skill is security-benign: it contains only triage instructions, no executable files, and its local health/context handling is disclosed and consent-gated.
Before installing, understand that this is a local-first health triage prompt, not a diagnosis tool. It may ask the agent to consider git activity and local host context as fatigue signals, and it may store health background locally only with your consent. This version also references bundled scripts and reference files that are absent, so some intended functionality may be unavailable.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.
