pionex-earn-dual
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed Pionex Dual Investment helper, but it can act on real crypto earn positions if you provide API credentials.
Install only if you want an agent to help manage Pionex Dual Investment. Verify the npm CLI package and publisher, use a dedicated least-privilege Pionex API key, review every dry-run payload carefully, and require explicit confirmation before any real invest, revoke, or collect action.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.