Security audit
Max QMD Search
Security checks across malware telemetry and agentic risk
Overview
This is a small, coherent skill for installing and using a local document search tool, with expected privacy considerations around indexing local files.
Install only if you trust the qmd GitHub repository. Index specific project or documentation folders instead of broad home directories, avoid secrets and private data, keep OLLAMA_URL pointed at a trusted endpoint, and run MCP mode only with trusted clients.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.