Security audit
Finnhub Skill
Security checks across malware telemetry and agentic risk
Overview
This is a straightforward Finnhub stock-quote helper that uses a user-provided API key and shows no hidden or unrelated behavior.
Before installing, make sure you are comfortable giving the runtime access to your Finnhub API key through an environment variable. Use a limited or revocable key where possible, and expect the script to contact Finnhub when fetching quotes.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.