Security audit
audio-quality-check
Security checks across malware telemetry and agentic risk
Overview
The skill is a local audio-quality analyzer, but one analysis mode can leave private extracted audio copies in temporary files without warning.
Review before installing if you analyze sensitive calls. The skill appears purpose-aligned and local-only, but users should avoid the --echo shortcut or manually delete /tmp/audio_analysis_* and /tmp/system.wav or /tmp/mic.wav after use until cleanup is fixed.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.