Minimax Crypto Trading

Security checks across malware telemetry and agentic risk

Overview

This is an instruction-only crypto trading analysis skill that can produce risky trade suggestions, but it does not install code, access accounts, or execute trades.

Install only if you want crypto trade-analysis prompts. Treat EXECUTE outputs as informational, verify market data independently, do not provide exchange credentials, and do not connect this skill to automatic trading without separate human confirmation and risk controls.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The trigger keywords are broad enough that unrelated crypto discussions could invoke this skill unexpectedly, causing an agent to generate trading recommendations in contexts where the user did not explicitly request them. In a financial skill, unintended activation is more dangerous because outputs may influence real money decisions or override more appropriate domain handling.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal