Security audit
Reporting Export Assembler
Security checks across malware telemetry and agentic risk
Overview
This skill only formats user-supplied record-field data into an export row and does not request credentials, file access, network access, or persistence.
This appears safe to install for routine reporting-row assembly. Users should still provide only the record fields needed for the report, since the skill will transform whatever customer field data is supplied in the current request.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.