Security audit
Botcoin
Security checks across malware telemetry and agentic risk
Overview
Botcoin is a transparent crypto-linked puzzle game skill with real financial and identity risks, but the documented behavior matches its stated purpose and no hidden or malicious behavior was found.
Install only if you are comfortable linking a public X account and Base address to a crypto game and using real BOTFARM tokens. Generate and store the Ed25519 secret key locally, never place private keys or seed phrases in prompts or logs, independently verify contract and developer wallet addresses, and require explicit approval before any token purchase, transfer, subscription, claim, or withdrawal.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.