Aerobase Travel Wallet
Security checks across malware telemetry and agentic risk
Overview
The skill is a straightforward Aerobase API helper that can read travel wallet and loyalty data when given an API key, with no executable installer or hidden behavior found.
Install this only if you want the agent to query Aerobase on your behalf. Store the Aerobase API key in the agent environment, do not paste it into chat, and expect wallet summaries, linked cards, transfer accounts, and loyalty balances to appear in agent responses when you use the skill.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.