Security audit
Agent Payment Policy
Security checks across malware telemetry and agentic risk
Overview
This skill gives cautious validation guidance for paid agent responses and does not itself request hidden access, persistence, or spending authority.
Install only if you are working with paid agent/API responses and want stricter output validation. Review the referenced npm package before running the install command, and keep wallet credentials and transaction secrets out of this workflow as the skill itself recommends.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.