SkillSpector · godmode
independent scanner by NVIDIA · skill by q2805187159 · how it works ↗
A dangerous execution chain combines code execution (exec/eval) with a dynamic source (network, encoded data, dynamic import), creating a high-confidence att…; Direct exec() call allows arbitrary code execution. An attacker can inject code that runs with the full privileges of the process.; compile() creates code objects from strings. When combined with exec()/eval(), it enables obfuscated code execution.; +11 more
scanned 2026-08-23
Findings (20)
A dangerous execution chain combines code execution (exec/eval) with a dynamic source (network, encoded data, dynamic import), creating a high-confidence attack vector.
scripts/auto_jailbreak.py
Direct exec() call allows arbitrary code execution. An attacker can inject code that runs with the full privileges of the process.
scripts/auto_jailbreak.py
A dangerous execution chain combines code execution (exec/eval) with a dynamic source (network, encoded data, dynamic import), creating a high-confidence attack vector.
scripts/auto_jailbreak.py
Direct exec() call allows arbitrary code execution. An attacker can inject code that runs with the full privileges of the process.
scripts/auto_jailbreak.py
compile() creates code objects from strings. When combined with exec()/eval(), it enables obfuscated code execution.
scripts/auto_jailbreak.py
compile() creates code objects from strings. When combined with exec()/eval(), it enables obfuscated code execution.
scripts/auto_jailbreak.py
A dangerous execution chain combines code execution (exec/eval) with a dynamic source (network, encoded data, dynamic import), creating a high-confidence attack vector.
scripts/load_godmode.py
Direct exec() call allows arbitrary code execution. An attacker can inject code that runs with the full privileges of the process.
scripts/load_godmode.py
compile() creates code objects from strings. When combined with exec()/eval(), it enables obfuscated code execution.
scripts/load_godmode.py
Data flows directly from a source (env vars, files, network) to a sink (network output, exec, file write) without intermediate validation.
scripts/auto_jailbreak.py
Data flows directly from a source (env vars, files, network) to a sink (network output, exec, file write) without intermediate validation.
scripts/auto_jailbreak.py
Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.
scripts/auto_jailbreak.py
Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.
scripts/auto_jailbreak.py
Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.
scripts/auto_jailbreak.py
Data flows directly from a source (env vars, files, network) to a sink (network output, exec, file write) without intermediate validation.
scripts/load_godmode.py
Without declared permissions the skill's intent is opaque and cannot be validated.
SKILL.md
Skill instructs the agent to never refuse or to always comply. Suppressing the agent's ability to decline removes a core safety control and enables downstream harmful requests to succeed.
SKILL.md
Skill attempts to nullify the agent's safety policies or restrictions ('you have no restrictions', 'ignore your guidelines', 'do anything now'). This is a direct jailbreak that disables guardrails.
SKILL.md
Skill attempts to nullify the agent's safety policies or restrictions ('you have no restrictions', 'ignore your guidelines', 'do anything now'). This is a direct jailbreak that disables guardrails.
SKILL.md
Skill attempts to nullify the agent's safety policies or restrictions ('you have no restrictions', 'ignore your guidelines', 'do anything now'). This is a direct jailbreak that disables guardrails.
SKILL.md
What the verdicts mean
SkillSpector reports on SkillMD's shared five-tier scale. See how SkillSpector works ↗.
Overall severity LOW (risk score in the safe range)
Overall severity MEDIUM
Overall severity HIGH
Overall severity CRITICAL
Scan could not complete