Security audit
taskforce-loop-engineering
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed workflow helper for running governed task loops and its higher-impact install/runtime actions are explicitly scoped and confirmation-gated.
Review the installer plan before confirming it, especially the workspace root, queue, worker agent, systemd services, and dashboard listen mode. Tailnet dashboard access relies on Tailscale ACLs rather than an app login, so only enable it in an environment where that boundary is appropriate.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.