Security audit
RPM Package Management
Security checks across malware telemetry and agentic risk
Overview
This is a documentation-only RPM packaging guide with visible, expected build and validation commands.
Safe to install as an RPM packaging reference. Before allowing an agent to run commands from it, confirm the target distribution’s current packaging policy and prefer a container, VM, mock build root, or other test environment for install/uninstall validation.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
No VirusTotal findings
Static analysis
No suspicious patterns detected.