wsl-path-converter

Security checks across malware telemetry and agentic risk

Overview

This instruction-only skill just converts Windows file paths into WSL paths and does not install code, request credentials, or add persistence.

Use it when you intentionally want WSL path conversion, and double-check converted paths before file operations, especially when Windows-style paths appear inside code snippets, logs, or quoted text.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 89% confidence
Finding: The skill states that path conversion will happen automatically whenever a Windows-style path is provided, without defining clear boundaries for when it should activate. Overly broad automatic activation can cause unintended path rewriting in unrelated contexts, which may redirect file operations, break user intent, or interact unsafely with downstream tools that assume explicit user confirmation.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal