Aylien News Api

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:31 PM UTC
• Version:
  1.0.4

Overview

This is a disclosed Aylien News API helper that uses Membrane for authentication and API calls, with no evidence of hidden or destructive behavior.

Install only if you trust Membrane to broker access to your Aylien account. Prefer the listed Membrane actions, review any direct proxy path before use, and require explicit confirmation before sending POST, PUT, PATCH, or DELETE requests.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 76% confidence
• Finding: The skill documents raw proxy requests and explicitly lists mutating HTTP methods without warning that they may modify or delete remote data. In an agent context, that omission can normalize unsafe use of direct API calls and increase the chance of unintended state-changing requests when the user expected read-only news retrieval behavior.

VirusTotal

65/65 vendors flagged this skill as clean.