skill-quality-checker
Security checks across malware telemetry and agentic risk
Overview
This is a local, user-run skill quality checker whose file scanning and optional report writing match its stated purpose.
Install this if you want local quality reports for skills. Run it only against skill directories you intend to review, and choose report output paths deliberately so private paths or generated reports are not shared accidentally.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.