yaml-config
Security checks across malware telemetry and agentic risk
Overview
This is a simple YAML configuration helper skill whose guidance is coherent with its stated purpose and does not add hidden execution, network access, credentials, or persistence.
Reasonable to install for YAML configuration work. For sensitive, financial, operational, or vehicle-related configs, treat safe parsing as only the first step: validate allowed keys, expected types, acceptable ranges, and file provenance before using loaded values.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
67/67 vendors flagged this skill as clean.