SkillSpector · perl-security
independent scanner by NVIDIA · skill by azusagasaku · how it works ↗
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous …; Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.; YARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).
scanned 2026-08-23
Findings (4)
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
SKILL.md
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
SKILL.md
Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.
SKILL.md
YARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).
SKILL.md
What the verdicts mean
SkillSpector reports on SkillMD's shared five-tier scale. See how SkillSpector works ↗.
Overall severity LOW (risk score in the safe range)
Overall severity MEDIUM
Overall severity HIGH
Overall severity CRITICAL
Scan could not complete