CAI: ostium-with-cai

• Outcome: Pass
• Latest audit: Jun 4, 2026, 8:43 AM
• Version:
  1.0.15

Overview

This is a clearly disclosed CAI/Ostium trading skill with real financial risk, but the artifacts are coherent and do not show hidden, deceptive, or unrelated behavior.

Install only if you intend to let an agent use your CAI account for live Ostium trading. Use the narrowest CAI API scope available, understand that leveraged perps can lose funds and incur fees or gas costs, and require explicit confirmation before any place or close trade action.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The skill enables real custodial trading actions, including opening and closing leveraged perpetual positions and moving user funds, but it does not present a clear, explicit warning that these actions are financially binding and can cause loss of funds. In an agent-executed context, this omission increases the risk of users authorizing or triggering high-impact actions without fully understanding that live trades and custody-managed transfers will occur.

VirusTotal

62/62 vendors flagged this skill as clean.