Security audit
FarmDash Autonomous Operator
Security checks across malware telemetry and agentic risk
Overview
The skill is a disclosed DeFi automation operator with high-impact financial capabilities, but its artifacts describe scoped grants, approval gates, and no private-key handling.
Install only if you intend to run DeFi automation and understand the financial risk. Keep budgets and session-key grants narrow, verify expiry and revocation paths, never share private keys or seed phrases, and review every EIP-712 approval before signing.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.