Security audit
ZeroGPU Router
Security checks across malware telemetry and agentic risk
Overview
This plugin is a disclosed ZeroGPU CLI router that sends selected task text to ZeroGPU and stores credentials only when the sign-in skill is used.
Install only if you are comfortable sending selected prompts, documents, and any PII submitted to these skills to ZeroGPU's hosted service. Do not use it for secrets, credentials, regulated data, or confidential code unless third-party processing with ZeroGPU is approved, and be aware that sign-in stores a persistent API key on the machine.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
62/62 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.