Security audit
Genius Referrals Api
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed Genius Referrals API helper that can make account changes, but it scopes those actions to user-directed API work and requires confirmation for high-impact operations.
Install only if you intend to let the agent operate your Genius Referrals account through the public API. Use a scoped token where possible, prefer QA for tests, confirm account slug and base URL before writes, and require explicit approval for deletes, payouts, redemption changes, and forced bonuses.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.