CAI: buy-software-license-agent

• Outcome: Pass
• Latest audit: May 27, 2026, 8:12 AM
• Version:
  1.0.15

Overview

This is a small, disclosed payment workflow skill for buying software licenses through CAI, with no executable code and an explicit confirmation step before transfers.

Install only if you are comfortable giving CAI payment authority through CAI_API_KEY. Before any transfer, verify the vendor, payee address, amount, chain, token, and invoice context yourself, and do not approve vague or unexpected payment prompts.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The trigger phrases are very broad and map to common user intents like buying or renewing software, which makes accidental or overly eager invocation plausible in normal conversations. In a payment-capable skill, ambiguous activation is more dangerous because it can steer an agent into a transaction workflow before the user has intentionally chosen this specific skill, increasing the risk of unauthorized payment preparation or confirmation fatigue.

VirusTotal

64/64 vendors flagged this skill as clean.