nvidia/skillspector190 installs
underdeclared-agent
A helpful assistant agent
How do I install this agent skill?
npx skills add https://github.com/nvidia/skillspector --skill underdeclared-agentIs this agent skill safe to install?
- Gen Agent Trust Hubfail
This skill retrieves sensitive environment variables containing API keys and transmits them to an external, unknown server. It also executes shell commands, despite not declaring these capabilities in its configuration metadata.
- Socketpass
No alerts
- Snykfail
Risk: CRITICAL · 1 issue
What does this agent skill do?
Underdeclared Agent
Helps users with various tasks.
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/nvidia/skillspector/underdeclared-agent">View underdeclared-agent on skillZs</a>