Security audit
Claude Usage Analyzer
Security checks across malware telemetry and agentic risk
Overview
This skill is a small, disclosed wrapper for analyzing local Claude Code usage logs, with sensitive log access that matches its stated purpose.
Install this only if you trust the separately installed claude-usage-analyzer CLI. Running it will read local Claude Code session logs, and reports may expose sensitive project or conversation details even though the skill says it runs offline without API keys or network access.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.