Security audit
Kalshi CLI
Security checks across malware telemetry and agentic risk
Overview
This skill guides an agent to use a Kalshi trading CLI, including protected order actions, with clear safeguards and no hidden behavior found.
Install this only if you intend the agent to help with Kalshi research and carefully controlled order operations. Keep credentials in the configured files or environment variables with strict file permissions, prefer demo mode unless you explicitly want production, and review dry-run plans and confirmation digests before any live order action.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.