EC Sample Tracker

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:41 PM UTC
• Version:
  1.0.0

Overview

This is a coherent local lab sample-tracking tool, with a caution that bulk imports can overwrite matching sample records.

Use this as a local sample database tool, but back up samples.db before bulk imports and check CSV/JSON imports for duplicate sample_id values. Avoid linking unrelated sensitive files, since linked paths and notes are stored in the local database.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The import routine uses `INSERT OR REPLACE`, which will silently overwrite existing sample records when an imported `sample_id` matches one already in the database. In a lab tracking context, this can destroy provenance, notes, ownership, and status history, undermining data integrity and traceability even if there is no direct code-execution risk.

VirusTotal

66/66 vendors flagged this skill as clean.