SkillSpector looks for patterns such as shell commands, credential access, network calls or unpinned dependencies. An observation is something worth reading in the files before you install, not a confirmed vulnerability. Components that run code locally, like hooks, MCP servers and security tooling, naturally show more of them.

• Credential Access

  Privilege Escalation · supply-chain-audit.md:54

Learn more about NVIDIA SkillSpector or how components are reviewed.