effect-ts

Security checks across malware telemetry and agentic risk

Overview

This is a documentation-only Effect-TS coding guide with no executable installer, persistence, or hidden data handling.

Install this if you want an agent to produce and review Effect-TS code. Be aware it may activate for some TypeScript work where Effect is only a possible fit, and its AI-provider examples reference optional API keys that should be supplied only when you intentionally use those providers.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 91% confidence
Finding: The skill description includes very broad activation criteria such as triggering on any project that 'could benefit from Effect patterns' and multiple generic TypeScript concepts. In an agent system, this can cause the skill to be invoked in unrelated contexts, increasing prompt-surface exposure and allowing its instructions to inappropriately steer outputs where the library is not actually in use.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal