Local Cpp Code Review

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:41 PM UTC
• Version:
  0.1.1

Overview

This is an instruction-only C/C++ local code review skill whose filesystem reading is disclosed and aligned with its purpose.

Before installing or using it, only point it at directories you intend the agent to read. Avoid broad paths that may contain secrets or unrelated proprietary code, and review the generated report before sharing it outside your environment.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The skill explicitly scans local directories and reads source files, but it does not require clear user notice or confirmation before accessing local paths and collecting code content. In an agent environment, this can lead to unintentional exposure of sensitive local source code, secrets embedded in files, or proprietary project structure when a user makes a broad review request.

VirusTotal

65/65 vendors flagged this skill as clean.