Security audit
WhatsApp Business
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed WhatsApp Business API integration that uses Maton for OAuth/API proxying and does not show hidden execution or data exfiltration behavior.
Install only if you trust Maton as an intermediary for WhatsApp Business account access and message data. Keep MATON_API_KEY private, confirm recipients, connection IDs, message contents, and destructive changes before writes, and revoke unused OAuth connections.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.