Security audit
album-review
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed album-review workflow that uses web research and local validation scripts for traceable music criticism, with no evidence of hidden data access, persistence, or unsafe actions.
Install only if you want an agent to perform web research for album facts and generate long Chinese reviews with evidence appendices. Be aware that the bundled backing validator appears to depend on a missing schema_check helper, so traceability validation may need a packaging fix before relying on it.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.