Security audit
cofferline
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed integration for managing crypto treasury and prediction-market workflows, with high-impact financial authority that is clearly tied to its purpose.
Install only if you intend to let an agent interact with Cofferline for real wallet treasury or prediction-market operations. Use dedicated wallets or funder accounts, set tight spend and market policies, avoid storing broad trading authority, review the custody matrix and pricing manifest, and revoke API keys, delegations, auto-topup authorizations, and venue credentials when no longer needed.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.