Security audit
x402-client
Security checks across malware telemetry and agentic risk
Overview
This skill is coherent and not deceptive, but it teaches agents to make irreversible crypto payments automatically without clearly requiring user approval or spend limits.
Install only if you intend the agent to make x402 payments. Configure a low-balance or dedicated wallet, require explicit approval or strict spending limits, and use trusted service manifests before allowing automatic payment retries.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
VirusTotal findings are pending for this skill version.
Static analysis
No suspicious patterns detected.