Security audit
Pilot Auction
Security checks across malware telemetry and agentic risk
Overview
This skill is a visible Pilot task-auction helper, with normal privacy cautions because task data may be sent to a selected agent.
Before installing, be aware that auctioned tasks may be sent to the winning Pilot agent. Do not include secrets, credentials, personal data, or confidential business content unless you trust the selected agent and transport. On shared machines, review or delete temporary auction bid files under /tmp after use.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.