Security audit
zayn-handover
Security checks across malware telemetry and agentic risk
Overview
This is a documentation-only work-handover skill that organizes user-provided project status, owners, deadlines, files, and risks without requesting hidden access or making changes.
Before installing, users should understand this skill is meant to structure potentially sensitive internal handover information. Provide only information appropriate for the workspace, and review generated handovers before sharing them, especially when they include contacts, permissions, file locations, deadlines, or risks.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.