Security audit
wenyan-commit-message-skill-2
Security checks across malware telemetry and agentic risk
Overview
This skill is a narrowly scoped helper for drafting Classical Chinese git commit messages and does not contain executable code or hidden behavior.
Install this if you want an optional commit-message style helper. When invoked, it may inspect your current git diff, so use it only in repositories where you are comfortable letting the agent read pending changes.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
62/62 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.