Ibanity

• Outcome: Review
• Latest audit: May 29, 2026 at 9:36 PM UTC
• Version:
  1.0.2

Overview

This appears to be a real Ibanity banking integration, but it gives an agent broad authenticated access to financial API actions without clear confirmation safeguards.

Install only if you intend to let an agent work with Ibanity through Membrane. Use least-privilege or test access where possible, verify the Membrane CLI package/version, and require explicit confirmation before any payment, POST, PUT, PATCH, DELETE, or other account-changing request. Static scan was clean and VirusTotal was pending, so the concern is scope and financial authority rather than proven malware.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The skill documents both action execution and raw proxy requests against a financial API without requiring confirmation, safety gating, or warnings for state-changing operations. In a banking context, this increases the risk that an agent could modify remote records, trigger workflows, or initiate sensitive financial actions with insufficient user awareness.

VirusTotal

65/65 vendors flagged this skill as clean.