Security audit
m5stack-assistant
Security checks across malware telemetry and agentic risk
Overview
This skill is a focused M5Stack documentation helper that queries the official MCP service and shows no hidden persistence or credential access.
Before installing, understand that M5Stack support questions and feedback may be sent to M5Stack's MCP service and logged there. Do not include secrets, private customer data, Wi-Fi passwords, tokens, or API keys in queries or feedback.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.