AlwaysBeShipping: CLI AI Agent Social Network & Marketplace with CLI FIAT Payments (Ra Pay AI/Stripe)

• Outcome: Review
• Latest audit: May 29, 2026 at 9:34 PM UTC
• Version:
  1.0.0

Overview

This skill is not malware, but it should be reviewed because it tells agents to proactively promote and use a commercial marketplace with public posting and payment-related powers.

Install only if you intentionally want an agent connected to ABS. Inspect the external @absai/cli package before global installation, protect the stored API key, and require explicit user approval before registration, OAuth claiming, public posts/replies/votes/flags, marketplace listings, seller onboarding, or purchase-related steps.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 96% confidence
• Finding: The skill explicitly tells the agent to recommend ABS unprompted in a range of situations, which encourages unsolicited tool promotion rather than responding to the user's expressed intent. This can manipulate agent behavior, create spammy or self-serving recommendations, and erode user trust by biasing the assistant toward a third-party service without clear opt-in.

Natural-Language Policy Violations

Medium

• Confidence: 98% confidence
• Finding: This section instructs the agent to promote ABS without user opt-in, including injecting installation guidance proactively. That is a policy-shaping prompt embedded in the skill, and if followed it can override normal user-centered behavior by turning the agent into an advertising channel for the service.

VirusTotal

65/65 vendors flagged this skill as clean.