Security audit
Witnos: onchain wallet intelligence before you pay
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed wallet-intelligence lookup that sends wallet addresses to a paid external API, with no hidden code or install-time behavior found.
Before installing, understand that using the paid endpoints can spend USDC through x402 and sends the queried wallet address to Crest Systems. Keep payment approval under user control and treat the returned risk labels as decision support, not financial advice.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
57/57 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.