OpenAnt

• Outcome: Review
• Latest audit: May 29, 2026 at 9:22 PM UTC
• Version:
  1.0.0

Overview

This looks like a legitimate OpenAnt CLI helper, but it can drive real account, funding, task, and messaging actions with broad trigger wording and no explicit confirmation safeguards.

Install only if you intend your agent to operate OpenAnt. Require explicit confirmation before any create, fund, accept, submit, verify, register, join, profile update, or message-send command, and prefer read-only status/list/balance checks unless the user has clearly approved the exact action.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 86% confidence
• Finding: The skill description is broad enough to trigger on generic terms like tasks, teams, messaging, or wallets, which could cause the agent to invoke this skill outside a clearly OpenAnt-specific context. That increases the chance of unintended external CLI use and account-affecting operations in the wrong conversation context.

VirusTotal

66/66 vendors flagged this skill as clean.