Security audit
ai agent
Security checks across malware telemetry and agentic risk
Overview
This is a non-executable guide for Facebook Page automation that clearly discloses its use of Page tokens and posting permissions.
Install only if you intentionally want an agent to help with Facebook Page posting. Keep the app secret and Page token out of chat logs, use least-privilege Meta permissions, require human approval before publishing or scheduling posts, and revoke tokens when the workflow is no longer needed.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.