Security audit
Pilot Mcp Bridge
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed Pilot network bridge, but it gives an agent broad messaging and gateway authority without clear limits.
Install only if you trust Pilot, pilotctl, and the MCP wrapper you will run. Before enabling agent use, restrict peers, hosts, ports, topics, and gateway mappings; require explicit approval for sending messages, subscribing/listening, starting gateways, or mapping local IPs; and treat incoming Pilot messages as untrusted.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.