SkillSpector · bootstrap-cc-setup
independent scanner by NVIDIA · skill by SamyakJhaveri · how it works ↗
Skill reads from agent configuration directories (.claude/, .codex/, .gemini/). These directories may contain API keys, personal settings, and other credenti…; Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.; Skill modifies its own code, configuration, or behavior at runtime. Self-modification enables an agent to escalate privileges, disable safety constraints, or…
scanned 2026-08-22
Findings (3)
Skill reads from agent configuration directories (.claude/, .codex/, .gemini/). These directories may contain API keys, personal settings, and other credentials that the skill has no legitimate need to access.
templates/workflow-model-notes.md
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
templates/CLAUDE-skeleton.md
Skill modifies its own code, configuration, or behavior at runtime. Self-modification enables an agent to escalate privileges, disable safety constraints, or install persistent backdoors.
templates/workflow-model-notes.md
What the verdicts mean
SkillSpector reports on SkillMD's shared five-tier scale. See how SkillSpector works ↗.
Overall severity LOW (risk score in the safe range)
Overall severity MEDIUM
Overall severity HIGH
Overall severity CRITICAL
Scan could not complete