Security audit
设计日报
Security checks across malware telemetry and agentic risk
Overview
This skill fetches public design and technology news from disclosed sources and formats a daily digest, with no evidence of private data access or hidden harmful behavior.
Install only if you are comfortable with a skill running local Python/Bash scripts, making web requests to the listed news sites, and writing small cache/log/archive files. Review the optional auto-fetch helper before adding it to cron because it calls a local workspace script outside this package.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
67/67 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.