Security audit
Generate Facebook Ad Creative Variations
Security checks across malware telemetry and agentic risk
Overview
The skill is for generating Facebook ad ideas, but it requests unnecessary local shell/file access and its install instructions point to a different source.
Review before installing. The ad-generation instructions themselves are low risk, but remove or restrict Bash and Read permissions unless you intentionally want this skill to access local files or run shell commands, and verify that any install command or GitHub repository matches the reviewed package.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.