simple-calculator
Security checks across malware telemetry and agentic risk
Overview
This is a small calculator skill whose only executable code evaluates arithmetic expressions, with no evidence of hidden data access, persistence, networking, or destructive behavior.
Safe to install for simple local calculations. Be aware it runs a local Python script and uses eval internally, so avoid feeding it extremely large expressions; a future version should preferably use an AST-based arithmetic evaluator.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.