Security checks across malware telemetry and agentic risk
The skill appears to be a legitimate DVP document-generation workflow, but it should be reviewed because it directs agents to overwrite workspace files without asking first.
Install only if you are comfortable with the skill creating and replacing files under dvp_workspace during normal use. Run it in a fresh project or backup existing DVP outputs first, and prefer a version that asks before overwriting files. VirusTotal was pending and is not a basis for this verdict; the Review decision is based on the artifact’s explicit overwrite behavior.
2. At each phase's [Done] step, write all deliverable files to `dvp_workspace/` 3. At the start of each phase (except Phase 1), read the previous phase's deliverable files first 4. File names are hard-coded in each phase instruction — do not rename them 5. Overwrite existing files without asking for confirmation 6. All files use Markdown format. The only exceptions are: `dvp_content.json` (JSON), `DVP_<ProtocolNumber>_v1.0.xlsx` (Excel), and any user-provided template files. ### Cross-Phase File: assumptions-and-gaps.md
2. At each phase's [Done] step, write all deliverable files to `dvp_workspace/` 3. At the start of each phase (except Phase 1), read the previous phase's deliverable files first 4. File names are hard-coded in each phase instruction — do not rename them 5. Overwrite existing files without asking for confirmation 6. All files use Markdown format. The only exceptions are: `dvp_content.json` (JSON), `DVP_<ProtocolNumber>_v1.0.xlsx` (Excel), and any user-provided template files. ### Cross-Phase File: assumptions-and-gaps.md
65/65 vendors flagged this skill as clean.
