Security audit
wcag-skill
Security checks across malware telemetry and agentic risk
Overview
This skill provides disclosed accessibility-auditing workflows and helper files, with no evidence of hidden data access, exfiltration, or destructive behavior.
Review the global npm install and browser setup commands before use, especially on managed machines. The skill otherwise appears focused on accessibility validation and benchmark support, and its included script/templates do not show hidden network or credential behavior.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.