multi-news-aggregator-via x402

• Outcome: Review
• Latest audit: May 29, 2026 at 9:27 PM UTC
• Version:
  1.0.0

Overview

This skill is a paid remote news-search integration, but it asks agents to use a crypto private key for payments while being mislabeled as local-only.

Review before installing. Use only a dedicated low-balance wallet or delegated signer, keep the private key out of prompts, logs, and source control, and require explicit per-call approval or spending limits. Treat all searches as data sent to a third-party paid API despite the Local Only label.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Intent-Code Divergence

Low

• Confidence: 95% confidence
• Finding: The skill is labeled 'Local Only' even though it explicitly instructs the agent to send POST requests to https://www.x402api.app/. This can mislead operators into believing no external communication occurs, reducing scrutiny around data egress, billing, and trust boundaries.

Missing User Warnings

Medium

• Confidence: 91% confidence
• Finding: The documentation directs users to configure an EVM private key and demonstrates signing payment payloads for external requests, but it does not include a prominent warning about secret handling, wallet risk, or external transmission of user queries. In an agent setting, this increases the chance of unsafe key exposure, unintended paid requests, and sensitive prompt/query data being sent to a third-party service.

VirusTotal

62/62 vendors flagged this skill as clean.