Security audit
Scraper Template
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed Playwright-based template for scraping API documentation and saving local JSON files, with no evidence of hidden persistence, credential access, exfiltration, or destructive behavior.
Before installing, be aware that running a derived scraper will load the target site in Playwright and save scraped documentation data locally. Review any platform-specific subclass you add, choose the base URL and output directory intentionally, and avoid running it against authenticated or sensitive sites unless you intend that data to be captured.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.