Security audit
Br Risk Analyzer
Security checks across malware telemetry and agentic risk
Overview
This is a benign code risk review skill, but it can save local notes and reports that may contain sensitive project details.
Install this only for repositories where it is acceptable for an agent to inspect requirements and source code. Review or delete generated risk reports and resources/project-understanding.md when working with confidential code, and give the agent explicit paths and scope limits before use.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.