Marketplace Guru
Security checks across malware telemetry and agentic risk
Overview
Marketplace Guru is a disclosed read-only shopping research skill; its main risk is optional browser use with marketplace account context.
Use this for product research and comparison, not checkout automation. Before using it with real marketplace accounts, review the separate browser dependency, prefer a dedicated browser profile without saved payment methods, and keep login, cart, payment, seller messaging, and account changes under your direct control.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.