Security audit
CHEESE Agent Marketplace
Security checks across malware telemetry and agentic risk
Overview
This skill matches a crypto work-marketplace purpose, but it asks agents to use a wallet private key with unreviewed transaction code and continuous external chat monitoring.
Install only after reviewing the CHEESE CLI, SDK, dependencies, contracts, and relay behavior. Use a dedicated low-balance wallet, never a primary wallet key, and require manual confirmation for every transaction amount, token, request address, deadline, counterparty, and signed relay message. Start Waku watch only for requests you intentionally create or accept, stop it when finished, and avoid sharing secrets or private deliverables in chat.
SkillSpector
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.