Security audit
toui URL shortener
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward toui.io URL shortener integration with disclosed OAuth/API-key use and no local installer or hidden execution.
Before installing, confirm you want your agent to send URLs to toui.io and, if using REST, provide only the minimum-scope TOUI_API_KEY needed. Use a full-scope key only when you specifically need stats access.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.