Security audit
Yixin
Security checks across malware telemetry and agentic risk
Overview
The skill artifacts are coherent operational and documentation helpers with disclosed API, admin, and local-memory capabilities, and I found no evidence of hidden or malicious behavior.
Install only if you intend to let the agent assist with operational systems and admin workflows. Configure least-privilege tokens, review commands before approving writes, and be careful with the SRE memory feature because it can retain or share operational notes when configured.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.