Sports Odds
Security checks across malware telemetry and agentic risk
Overview
The sports odds skill appears to do only its stated job: query The Odds API with a user-provided key and parse the results.
This looks safe to install if you intend to use The Odds API. Provide only the needed API key, avoid pasting unrelated secrets into the agent context, and monitor API usage or quota because live odds calls will contact the external provider.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.