Efectivo o Cuotas (ARGENTINA)

Security checks across malware telemetry and agentic risk

Overview

This is a simple payment comparison calculator that may use a public inflation-data lookup, with no code execution, credentials, persistence, or destructive behavior.

Safe to install as a lightweight calculator. Provide tasa_oportunidad_mensual yourself if you do not want any network lookup, or ask the agent to show the source and assumptions when it estimates inflation.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Low

Confidence: 86% confidence
Finding: The skill instructs the agent to call an external government API to infer a financial rate, but it does not disclose this network dependency or possible transmission of user-linked query context. While the endpoint appears benign and the data requested is public, hidden outbound requests create privacy, reliability, and transparency risks if users are unaware that responses may depend on external services.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal