← back to implementing-privileged-session-monitoring
SkillSpector · implementing-privileged-session-monitoring
independent scanner by NVIDIA · skill by mukul975 · how it works ↗
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or ; Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.; Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.; +3 more
scanned 2026-07-07
Findings (12)
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or
SKILL.md
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
SKILL.md
Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.
SKILL.md
Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.
SKILL.md
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glo
SKILL.md
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glo
SKILL.md
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glo
SKILL.md
Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.
SKILL.md
Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.
SKILL.md
YARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).
SKILL.md
YARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).
SKILL.md
YARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).
SKILL.md
What the verdicts mean
SkillSpector reports on SkillMD's shared five-tier scale. See how SkillSpector works ↗.
Overall severity LOW (risk score in the safe range)
Overall severity MEDIUM
Overall severity HIGH
Overall severity CRITICAL
Scan could not complete