gold-price-checker

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:16 PM UTC
• Version:
  1.0.0

Overview

This skill is a straightforward gold-price lookup helper that uses public web data and does not request private access or install executable code.

Safe to install for informational gold-price lookups. Treat prices and trend commentary as reference only, because they depend on external public sources and should not be used as the sole basis for financial decisions.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The trigger description is overly broad, matching many common gold-related queries such as price checks, trends, and future analysis without clear constraints. This can cause unintended activation and unnecessary external web access, increasing the chance of inappropriate tool use, misleading financial guidance, or expanded attack surface from user-controlled prompts routed into web extraction/search workflows.

VirusTotal

65/65 vendors flagged this skill as clean.