Security audit
Evaluation Suite
Security checks across malware telemetry and agentic risk
Overview
This skill appears to be a local JavaScript evaluation helper with no evidence of hidden access, data exfiltration, persistence, or destructive behavior.
Reasonable to install from a security perspective. Treat its scores as simple heuristic checks rather than authoritative safety judgments, and note that some README examples use parameter names that do not exactly match the implementation.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
VirusTotal findings are pending for this skill version.
Static analysis
No suspicious patterns detected.