Security audit
aisa financial data api
Security checks across malware telemetry and agentic risk
Overview
This skill appears to be a straightforward AIsa financial data API client that uses a declared API key to query a disclosed external endpoint.
Install only if you are comfortable providing an AISA_API_KEY and sending financial-data queries to AIsa's API endpoint. Avoid putting unrelated secrets or private account exports into requests unless the provider documentation explicitly requires and protects that data.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.