Security audit
Open Source Maintainer Team — Agent Configuration Bundle
Security checks across malware telemetry and agentic risk
Overview
This is a small, disclosed repository-maintenance skill whose file, shell, and memory capabilities fit its stated purpose.
Install this only in repositories where you are comfortable allowing a maintainer-style agent to read files, edit documentation or tests, run shell commands, and store project context in memory. Keep normal review controls around generated changes and commands.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.