junior-high-math-research-plans
Security checks across malware telemetry and agentic risk
Overview
This looks like an educational math resource skill, but it asks for local command-execution permission that its visible code does not need.
Review before installing. The skill appears to provide ordinary teaching resources and plan generation, but only install it if you trust the publisher and are comfortable granting command-execution permission that is broader than the visible functionality requires.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.