Video Organizer

Security checks across malware telemetry and agentic risk

Overview

The available evidence does not show malicious behavior, but the reported undo limitation should be checked before trusting the tool with important videos.

Before installing, confirm how organize and undo behave on a small test folder. Do not point it at irreplaceable or sensitive media until you know whether undo deletes copied outputs or only reverts renames.

SkillSpector

By NVIDIA

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Intent-Code Divergence

High

Confidence: 92% confidence
Finding: The tool advertises undo capability, but `organize()` copies files to the output directory while `undo()` only renames paths from the backup mapping. For organize operations, this means the copied files in the output tree are not reverted, which can leave duplicate sensitive media, create a false sense of rollback safety, and cause privacy or storage-management issues.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal