Security audit

Currency Converter Pro

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward currency converter that uses a disclosed public exchange-rate API and shows no local data access, persistence, or system modification.

Install if you are comfortable with exchange-rate lookups contacting open.er-api.com. Treat returned rates as informational, verify important financial decisions with official sources, and be aware the trigger language may catch broad currency-exchange questions.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 87% confidence
Finding: The skill advertises shell and network-backed functionality but does not declare any permissions or clearly surface those capabilities in a structured way. This creates a transparency and governance gap: users and hosting platforms may not realize the skill can initiate outbound requests and execute local commands, increasing the risk of unintended data exposure or abuse if the underlying scripts are invoked unsafely.

Missing User Warnings

Medium

Confidence: 91% confidence
Finding: The skill identifies an external data source, but it does not clearly warn users that their query parameters may be transmitted to a third-party exchange-rate service during use. Even if the data is low sensitivity in many cases, currency queries can still reveal financial interests, travel plans, counterparties, or transaction context, so missing disclosure is a privacy and consent issue.

Static analysis

No suspicious patterns detected.