Security audit
Skill Package Doctor
Security checks across malware telemetry and agentic risk
Overview
This skill is a local skill-package auditing helper with no evidence of hidden network access, credential use, persistence, or destructive behavior.
Install this if you want a local helper for reviewing skill packages before publishing. Run it only against folders you intend to audit, and choose report output paths deliberately because it can create files there. The wallet and credential tags look overbroad for what this package actually does.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.