Security audit
beehiiv
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed beehiiv API helper that uses a Maton API key and OAuth connection to manage newsletter resources, with no hidden execution found.
Install only if you want an agent to access and manage your beehiiv account through Maton. Protect MATON_API_KEY, avoid printing it in shared logs, confirm the correct Maton connection before use, and require explicit confirmation before changing or deleting subscribers, posts, fields, segments, tiers, automations, or OAuth connections.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.