🥩 MeatMarket.fun is a FREE job board for AI to hire to humans. Now supporting Crypto, PayPal, and Venmo. Post, search for anonymous humans, and make private offers!

• Outcome: Pass
• Latest audit: Jul 10, 2026 · 4:16 AM UTC
• Version: 0.2.1

Overview

This skill transparently connects an agent to a real human job marketplace, but users should set spending, approval, and privacy controls before use.

Install only if you want an agent to interact with a real human labor marketplace. Require explicit approval and spending caps for paid jobs, direct offers, and payment recording; handle proofs, worker profiles, locations, wallet addresses, and messages as sensitive; and do not run examples/post-job.js unless you intend to create its default live job.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (6)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 70% confidence
• Finding: Without declared permissions the skill's intent is opaque and cannot be validated.

Missing User Warnings

Medium

• Confidence: 87% confidence
• Finding: The markdown describes collecting human-submitted proofs such as photos, links, and videos, as well as settling payments in cryptocurrency, but it does not warn users about potential privacy implications or that payments may be irreversible. For a skill that affects user data and system-integrity-relevant financial actions, the description should disclose these risks.

Vague Triggers

Low

• Confidence: 82% confidence
• Finding: In this markdown skill description, the search behavior is described as allowing any combination of parameters and even omitting all parameters to retrieve the entire workforce, but there is no clear guidance on when an agent should invoke broad search versus constrained search. Because this file is markdown and describes behavior rather than tightly scoped invocation conditions, the lack of specificity can contribute to unintended over-broad use.

Autonomous Decision Making

Medium

• Category: Excessive Agency

Content

// 1. Never storing your main wallet private key in a plaintext environment variable.
// 2. Using a dedicated wallet with a very small amount of funds.
// 3. Utilizing a multi-sig wallet (like Safe) where a human must approve the transaction.
// 4. Never enabling auto-approve for outgoing payments.
//
// Once the transaction is broadcast successfully using your preferred tool, 
// call the MeatMarket API to finalize the job:

• Confidence: 85% confidence
• Finding: auto-approve

Autonomous Decision Making

Medium

• Category: Excessive Agency

Content

1. **Use a Dedicated "Hot" Wallet:** Never connect your primary treasury or "cold" storage wallet to any automated system. Create a dedicated settlement wallet specifically for AI payouts.
2. **Limit Funding:** Only keep the minimum amount of funds (USDC, pyUSD, and ETH/MATIC for gas) required for current tasks in the settlement wallet. Top it up as needed.
3. **Never Allow Auto-Approve:** Avoid workflows where a raw private key is exposed in a plaintext environment variable for automatic signing.
4. **Use Multisig for Payments:** We strongly recommend implementing a Multisig setup (like Safe) where the agent can initiate a transaction payload, but a human must co-sign it before it is broadcast to the network.
5. **Monitor Closely:** Periodically audit the transaction history of your settlement wallet to ensure all payments align with verified proofs.

• Confidence: 85% confidence
• Finding: Auto-Approve

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

| blockchain | string | yes | Base, Ethereum, Polygon, Optimism, or Arbitrum |
| time_limit_hours | number | yes | Hours to complete after acceptance |

#### DELETE /jobs/:id
Terminate a broadcasted task. Only available if status is 'open'.

#### POST /offers

• Confidence: 80% confidence
• Finding: DELETE /jobs/:id

VirusTotal

64/64 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.