Security audit
Bug Bounty Team — Agent Configuration Bundle
Security checks across malware telemetry and agentic risk
Overview
This is a coherent bug bounty workflow skill that discloses its broad review tools and does not include hidden install code or unsafe automatic behavior.
Install only for authorized security testing. Review any shell commands, file writes, and memory use during operation, especially when working with private repositories, credentials, or third-party systems.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.