Multi Agent Coordinator Zhuyu28

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:15 PM UTC
• Version:
  1.0.0

Overview

This is a straightforward multi-agent coordination helper that only stores local task/session state and shows no hidden network, credential, or destructive behavior.

Safe for ordinary coordination use. Before installing, remember that task descriptions and results can be saved in a local JSON file, so avoid putting secrets or sensitive personal data into sessions unless you control where that file is stored and clean it up when finished.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 70% confidence
• Finding: Without declared permissions the skill's intent is opaque and cannot be validated.

VirusTotal

64/64 vendors flagged this skill as clean.