Security audit
Context Slim
Security checks across malware telemetry and agentic risk
Overview
ContextSlim is a local token-analysis tool, but its HTML report can render untrusted conversation labels as HTML or script.
Use this only with input files you trust, especially when generating HTML reports. Treat generated reports as sensitive local files because they may contain prompt excerpts or metadata, and prefer text/JSON output for untrusted conversation exports until the report labels are escaped.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.