Back to skill

Security audit

Timothe Growth Calendar

Security checks across malware telemetry and agentic risk

Overview

This skill coherently connects to a hosted SEO calendar service and discloses its paid and mutating actions, with the main caution being low-cost research calls after broad user approval.

Before installing, understand that this skill connects your agent to a Timothe workspace, can spend paid credits on SEO research, and can create or edit calendar content. For expensive planning or article generation, the skill instructs the agent to ask first; for smaller research calls, set a credit budget if you want stricter control.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
first: the run may have succeeded and the retry would be charged again.

The research tools are different in kind. They are cheap and fast, so once the user has agreed to
look into a topic, run them without asking permission for each one. Do tell them roughly what you
spent when you report back.

## Checking a market before committing to it
Confidence
74% confidence
Finding
without asking

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.