Security audit
Code Reviewer Umy997
Security checks across malware telemetry and agentic risk
Overview
This is a simple code-review guidance skill with no evidence of hidden execution, credential access, persistence, or data transfer.
Reasonable to install for code review assistance. As with any review skill, avoid sharing secrets or proprietary code unless you are comfortable exposing that content to the agent environment.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.