Security audit
Cx Agent Studio
Security checks across malware telemetry and agentic risk
Overview
This is a documentation-only CX Agent Studio guide that describes powerful agent-building features but does not install or run code itself.
Safe to install as a reference guide. If you use it to build real CX Agent Studio agents, separately review any Python tools, callbacks, API connectors, SaaS integrations, logging destinations, and data stores because those external configurations can handle sensitive data or affect live systems.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
61/61 vendors flagged this skill as clean.
