Security audit
Ts Sdk Client
Security checks across malware telemetry and agentic risk
Overview
This is a documentation-only skill that explains how to configure an Aptos TypeScript SDK client and does not install, run, or hide code.
This skill is safe to install as documentation. When applying its examples, be careful with mainnet settings, custom endpoints, and any transaction code you add yourself, because those choices can affect real assets even though the skill itself does not perform those actions.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
55/55 vendors flagged this skill as clean.