Security audit
agentcard.ai
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed payment-card workflow for AgentCard, but it should be treated as high-impact financial tooling.
Install only if you are comfortable giving an agent limited payment-card capability. Keep user confirmation enabled, set a low max purchase amount, verify the AgentCard CLI package before installing it globally, protect the local AgentCard session file, and confirm current AgentCard terms and CLI commands before using it for real purchases.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.