Security audit
Nova Act Browser Automation
Security checks across malware telemetry and agentic risk
Overview
This skill automates browser tasks and may leave local debug traces, but those privacy risks are disclosed and match its stated purpose.
Install only if you are comfortable with an AI-controlled browser viewing the pages you choose. Avoid highly sensitive sessions unless necessary, review before any irreversible action, and delete local Nova Act trace files when they may contain private information.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.