short-form-market-research-brain

• Outcome: Pass
• Latest audit: Aug 3, 2026 · 3:10 PM UTC
• Version: 1.9.2

Overview

This is a coherent Virlo API research skill, but it can spend prepaid credits and create recurring external monitors, so paid and recurring actions need explicit user approval.

Install this only if you intend to use Virlo and are comfortable sending research queries, social URLs, handles, and monitoring targets to Virlo under your API key. Before any paid lookup, recurring monitor, tracking setup, autopilot change, PATCH/PUT, or DELETE action, confirm the target, cadence, estimated cost, and current balance; review recurring monitors periodically so they do not keep spending credits unintentionally.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (9)

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The README promotes recurring monitoring and use of a third-party API but does not clearly warn that user prompts, niche terms, URLs, and monitoring targets will be transmitted to Virlo, nor does it prominently emphasize that recurring runs can continue generating charges over time. In an agent ecosystem, users may assume a skill is local or one-shot unless disclosure is explicit, so this omission can lead to unintended data sharing and surprise billing.

Missing User Warnings

Low

• Confidence: 94% confidence
• Finding: The example directs the agent to perform paid Virlo API operations and only lists the cost at the end, without explicitly warning the user before execution or requiring confirmation. In an agent setting, this can lead to unintended charges if the workflow is run automatically, especially because the steps include an optional extra paid call that may be triggered without clear consent.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill instructs the agent to make authenticated external API calls using a bearer token and explicitly includes paid endpoints and a paid follow-on action, but it provides no user-facing notice, confirmation, or consent step for data sharing or charges. In an agent setting, this can cause unreviewed transmission of user-derived query data to a third party and unexpected billable usage, especially when the skill proactively chains multiple calls or offers a one-shot agent creation flow.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The example instructs the agent to create a recurring billed resource (`is_recurring: true`) and states that the first run queues immediately, but it does not require an explicit user confirmation acknowledging ongoing weekly execution, persistence, and per-run charges before the API call. In an agent setting, this can lead to unauthorized cost incurrence and creation of persistent monitoring jobs that continue billing until manually stopped.

Autonomous Decision Making

Medium

• Category: Excessive Agency

Content

1. Take keywords from the completed one-shot agent
2. `POST /v1/agents` with `is_recurring: true`, the same `intent`/keywords, and a `cadence` — free to create, then billed per run
3. The system automatically runs searches on the configured schedule. (No credits until the first run; recurring agents also self-optimize — see Autonomy.)

### Creator Growth Monitoring

• Confidence: 89% confidence
• Finding: automatically run

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

- `GET /v1/agents?is_recurring=true|false&include_inactive=true` — List agents.
- `GET /v1/agents/:id` — Config + autonomy state + latest run + merged latest analysis + `finalized` / `pending_jobs`.
- `PUT /v1/agents/:id` — Update mutable config (not collection scope).
- `DELETE /v1/agents/:id` — Soft delete (204).

**Read (all Free):**

• Confidence: 87% confidence
• Finding: DELETE /v1/agents/:id`

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

> ⚠️ **Deprecated — migrate to `/v1/agents`.** `POST /v1/orbit` and `POST /v1/comet` are frozen for back-compat and will be **removed on August 3, 2026**. Use `POST /v1/agents` (`is_recurring: false` = Orbit one-shot, `is_recurring: true` = Comet recurring). Existing `orbit_id`/`comet_id` values remain valid agent ids, and every read sub-path below also works verbatim under `/v1/agents/:id/…`. Do not build new integrations on these.

- `POST /v1/orbit` — $0.50. → `POST /v1/agents` with `is_recurring: false`. Reads (all Free): `GET /v1/orbit/:orbit_id` (poll), `/videos`, `/slideshows`, `/ads`, `/creators/outliers`, `/sounds`, `/analysis/latest`, `/analysis/history`, `/trends/latest`, `/trends/history`; list `GET /v1/orbit`.
- `POST /v1/comet` — $0.50 per run. → `POST /v1/agents` with `is_recurring: true` + `cadence`. Manage: `GET /v1/comet`, `GET/PUT/DELETE /v1/comet/:id`. Reads (all Free): same sub-paths as Orbit plus `/hashtags`, `/benchmarks`, `/affinity`, `/creators/:creator_id/similar` (all accept the same filters as their `/v1/agents/:id/…` equivalents).

**Satellite (Creator Lookup)** — Deep-dive into any creator's profile and performance, with optional AI trend detection over their body of work.

• Confidence: 84% confidence
• Finding: DELETE /v1/comet/:id`.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

- `GET /v1/tracking/creators/:id/posts/collect/:collection_id` — Free. Poll collection job status.
- `GET /v1/tracking/creators/:id/posting-cadence` — Free. Get posting frequency analytics (avg gap, posts per week/month, day-of-week stats).
- `PATCH /v1/tracking/creators/:id` — Free. Update status ("active" or "paused") or scrape_cadence.
- `DELETE /v1/tracking/creators/:id` — Free. Stop tracking (204, soft delete, data retained).
- `POST /v1/tracking/videos` — $0.25. Body: `{ "url": "video_url", "platform": "tiktok" }`. Optional: `scrape_cadence`, `tracking_account_id` (link to a tracked creator).
- `GET /v1/tracking/videos` — Free. List tracked videos. Params: page, limit, platform, search.
- `GET /v1/tracking/videos/:id` — Free. Get video details with latest metrics.

• Confidence: 88% confidence
• Finding: DELETE /v1/tracking/creators/:id`

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

- `GET /v1/tracking/videos/:id/report` — Free. Get latest AI analysis report (auto-generated each cycle).
- `GET /v1/tracking/videos/:id/snapshots` — Free. Historical metric snapshots. Includes delta\_\* fields.
- `PATCH /v1/tracking/videos/:id` — Free. Update status or scrape_cadence.
- `DELETE /v1/tracking/videos/:id` — Free. Stop tracking (204).

**Audience Demographics & Geography** — Engaged-audience profile (age, gender, country, city, language) for any tracked creator — read it as "who's showing up in the replies," derived from analyzing the creator's commenters rather than the raw follower base. (TikTok has a follower-list fallback when comments are sparse; see the `data_source` taxonomy below.) Snapshots are cached for 30 days; fresh collections are AI-driven and charged on dispatch only.

• Confidence: 88% confidence
• Finding: DELETE /v1/tracking/videos/:id`

VirusTotal

64/64 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.