Security audit

SwipeNode Web Extractor

Security checks across malware telemetry and agentic risk

Overview

This web-fetching skill is mostly purpose-aligned, but its broad activation guidance and TLS fingerprint impersonation for blocked sites warrant Review before installation.

Install only if you intend to let the agent fetch third-party web pages. Require explicit approval before using impersonation or bypass-related options, avoid authenticated or protected sites unless you have permission, and prefer ordinary HTTP/API access when available.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 80% confidence
Finding: The activation guidance is very broad and encourages the agent to prefer this tool for routine web-reading tasks. In an autonomous setting, that can cause unnecessary external requests to arbitrary URLs and expand use of TLS impersonation behavior beyond what the user explicitly intended, increasing privacy, compliance, and misuse risk.

Missing User Warnings

Medium

Confidence: 89% confidence
Finding: The usage instructions encourage accessing external websites and optionally impersonating Safari/Firefox TLS fingerprints to bypass blocking, but the operational guidance does not prominently warn about the legal, policy, and detection implications. This is dangerous because an agent may perform network actions that circumvent site defenses without informed user consent or adequate safeguards.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.