Security audit
release-flow
Security checks across malware telemetry and agentic risk
Overview
This skill is a project-specific Git release helper that can push to test and production branches, but its behavior is disclosed, user-directed, and proportionate to that purpose.
Install only if this exact redfoxhub-html Git workflow matches your repository process. The skill can push release branches that trigger test or production pipelines, so review each proposed Git command and confirmation prompt before allowing it to proceed.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
59/59 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.