Actindo

Security checks across malware telemetry and agentic risk

Overview

This Actindo ERP skill is coherent and not deceptive, but it gives an agent broad authenticated business-system access with under-scoped mutation guardrails.

Install only if you intentionally want an agent to operate through a Membrane-connected Actindo account. Use a dedicated least-privilege account, prefer listed Membrane actions over raw proxy requests, require explicit approval before any create/update/delete, fulfillment, invoicing, purchase, order, or stock change, and confirm you can revoke the Membrane connection when done.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Confidence: 89% confidence
Finding: The skill explicitly instructs use of generic proxy requests, including POST, PUT, PATCH, and DELETE, without any warning or guardrails around modifying live ERP records. In an ERP context, this can lead to accidental deletion, inventory corruption, order changes, or financial workflow disruption if an agent uses the proxy directly without confirmation or endpoint validation.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal