Scrub Trading Signals Pro
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed crypto market-signal helper that uses public market data and a CoinGecko API key, with no evidence of hidden access, trading execution, wallet use, or persistence.
Before installing, use a limited CoinGecko API key, do not provide exchange trading keys or wallet credentials, and verify the source of any trade_signals.py or other code supplied outside this package. Treat the signals as market research, not guaranteed financial advice.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.