Security audit
Get with Receipt
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed paid-API purchasing workflow with explicit approval, spending limits, and OAuth-based Receipt integration.
Before installing, confirm the Receipt MCP connection exposes only the eight listed receipt tools, keep approval set to ask every purchase, use low spend limits, and revoke OAuth if you no longer want the agent able to make Receipt purchases.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.