Cryptowatch
Security checks across malware telemetry and agentic risk
Overview
CryptoWatch is a straightforward crypto price-monitoring CLI that fetches public market data and stores only local alert settings.
Install only if you trust this npm publisher. Expect selected coin symbols and currency choices to be sent to CoinGecko, and expect alert thresholds to be stored locally. Do not send sponsorship payments unless you independently verify what they unlock, since the reviewed code does not implement an unlock mechanism.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.