Thunder Download
Security checks across malware telemetry and agentic risk
Overview
This package is a disclosed Windows Thunder download helper and the reviewed artifacts do not show hidden or unrelated behavior.
Install only if you intentionally want an agent to create and manage Thunder download tasks on Windows. Review requested URLs, save paths, and any cookies or headers before use, because those may affect local files or expose session data to the download target/Thunder client.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
62/62 vendors flagged this plugin as clean.