Sync Debox Docs

• Outcome: Pass
• Latest audit: Jun 9, 2026 at 6:44 PM UTC
• Version:
  1.0.0

Overview

This skill transparently downloads public DeBox documentation into a user-chosen folder and summarizes it, with behavior that matches its stated purpose.

Install this only if you want an agent to contact DeBox documentation pages and related documentation resources, then write a local mirror and summary. Choose a dedicated empty output folder, because the script manages files there and may remove stale files it previously recorded after a successful sync.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 70% confidence
• Finding: Without declared permissions the skill's intent is opaque and cannot be validated.

VirusTotal

64/64 vendors flagged this skill as clean.