Security audit
Customer Record Field Prep
Security checks across malware telemetry and agentic risk
Overview
This skill is a simple reporting helper that returns a customer record field value and does not request elevated access or perform hidden actions.
This appears safe to install for controlled reporting-field preparation. Users should still avoid pasting real sensitive customer data unless they are comfortable with their agent processing it, but the skill itself does not add special access or hidden behavior.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.