软件设计文档生成
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed document-generation helper that reads recent uploads and creates workspace files, with no evidence of hidden credential use, network access, or destructive behavior.
Install only if you are comfortable with the skill reading recently uploaded documents, moving them into a /workspace project folder, and creating generated documentation plus placeholder project files. Confirm the detected files, folder name, and output paths carefully, and treat any generated source files as empty scaffolding unless you inspect them.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.