Security audit

Nevermined Payments

Security checks across malware telemetry and agentic risk

Overview

This documentation-only skill clearly focuses on Nevermined payments and discloses its use of API keys, card delegation, and bounded spending controls.

Install only if you intend to build or operate Nevermined payment flows. Start in sandbox, use short-lived low-limit delegations, keep NVM_API_KEY and delegation IDs in a secret store, avoid logging callback query strings or full payment tokens, and use HTTPS for any non-local agent endpoint.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Natural-Language Policy Violations

Medium

Confidence: 98% confidence
Finding: The TypeScript example publishes an A2A agent card with `url: 'http://localhost:3005/a2a/'` even though the document explicitly states that payment tokens are bearer credentials and agents should be served over HTTPS. In a payment-bearing agent-to-agent flow, normalizing insecure example URLs can lead developers to deploy or test with cleartext transport, exposing `payment-signature` tokens to interception or misuse.

Natural-Language Policy Violations

Medium

Confidence: 99% confidence
Finding: The client example initializes `agentBaseUrl` with `http://localhost:3005/a2a/` while the surrounding guidance says A2A payment tokens are bearer credentials that must be transported over HTTPS. This creates insecure copy-paste guidance in the exact place where an access token is later sent to the agent, increasing the chance of token leakage and unauthorized charging if used beyond isolated local development.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: references/customer-onboarding.md:65

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: references/express-integration.md:186

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: references/fastapi-integration.md:284

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: references/langchain-integration.md:371

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: references/strands-integration.md:220