Zinc Universal Checkout

• Outcome: Pass
• Latest audit: May 28, 2026 at 12:24 PM UTC
• Version:
  1.0.1

Overview

This is a disclosed Zinc API checkout helper with real-money risk, but its sensitive behavior is expected for the stated purpose and includes confirmation guidance.

Install only if you intend to let an agent use your Zinc account. Keep the Zinc API key protected, confirm every purchase and max_price before ordering, and expect shipping/order details to be sent to Zinc.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 86% confidence
• Finding: The skill description is broad enough to activate on general shopping or order-related requests, which can route users into a capability that can place real-money purchases via Zinc. In this context, overbroad invocation is risky because the skill has spending authority and handles sensitive order/shipping data, so accidental invocation can lead to unintended purchases or exposure of order details.

VirusTotal

66/66 vendors flagged this skill as clean.