Security audit

WaveDrom Gen

Security checks across malware telemetry and agentic risk

Overview

This skill coherently generates and renders WaveDrom timing diagrams, with local file output and optional MCP registration that are disclosed and purpose-aligned.

Install this if you want local WaveDrom diagram generation. Review the optional MCP registration step before running it because it changes your agent configuration, and choose output directories intentionally since the render tool creates files there and can overwrite them only when explicitly allowed.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dangerous_exec

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/mcp-server.mjs:92

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/register-mcp.mjs:49

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/render-wavedrom.mjs:228