Security audit
Delivery Confirmation Desk
Security checks across malware telemetry and agentic risk
Overview
This skill is a small prompt-only workflow for recording a delivery confirmation pattern and shows no evidence of hidden access, execution, persistence, or data transfer.
This appears safe to install for its stated narrow purpose. It should only be expected to guide the agent in producing a delivery confirmation response, not to access files, run tools, or connect to external services.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
43/43 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.