Security audit
HederaToolbox
Security checks across malware telemetry and agentic risk
Overview
HederaToolbox is a coherent Hedera API skill, but it lets an agent spend prepaid HBAR and create persistent on-chain records using only a public account ID as the billing key.
Review before installing. Use a small prepaid balance, require manual approval for paid calls and any HCS write, avoid sending sensitive identity/compliance data unless necessary, and monitor both your HederaToolbox balance and any on-chain records created by the service.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.