ToDesk Alternatives

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:40 PM UTC
• Version:
  1.0.0

Overview

This is a Chinese-language reference guide recommending open-source remote desktop alternatives, with no hidden automation or credential access.

Install only if you can understand the Chinese instructions or can translate them reliably. Before running any linked downloads or the Docker example, verify the upstream projects, prefer pinned versions over :latest, and secure remote access with strong authentication, updates, firewall rules, or a VPN.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Natural-Language Policy Violations

Medium

• Confidence: 94% confidence
• Finding: The skill metadata, description, and trigger phrases are presented only in Chinese, which can cause users who do not read Chinese to invoke or install the skill without understanding its behavior. This is primarily a safety and transparency issue rather than code execution risk, but it can still undermine informed consent and proper use.

VirusTotal

66/66 vendors flagged this skill as clean.