Security audit
WhatsApp Business
Security checks across malware telemetry and agentic risk
Overview
This skill is a clearly disclosed WhatsApp Business API integration that uses Maton for authentication and does not show hidden or unrelated behavior.
Install only if you trust Maton as an intermediary for WhatsApp Business account access and message data. Keep MATON_API_KEY private, confirm recipients, message contents, connection IDs, and destructive changes before writes, and revoke unused OAuth connections.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.