Security audit
x402-trust-check
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed trust-check helper that fetches public ratings before x402 payments or skill installs, with optional paid lookups only when the user requests them.
Reasonable to install if you want an external rating source before paying x402 endpoints or installing skills. Treat the ratings as advisory, and only use the optional paid history or archive endpoints when you intentionally want to spend through your configured x402 wallet.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.