DefiLlama API

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed DefiLlama data CLI with optional Pro API-key use and no evidence of hidden persistence, destructive behavior, or unrelated data access.

Install this only if you are comfortable running uv and the pinned defillama-sdk dependency. Set DEFILLAMA_API_KEY only when you intentionally want Pro endpoints, because the skill will send that key to DefiLlama through the SDK and may use your API quota.

SkillSpector

By NVIDIA

Vulnerability Patterns

MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 89% confidence
Finding: The skill declares no explicit permissions, yet its metadata and usage clearly require environment-variable access and outbound network access to DefiLlama APIs. This mismatch weakens security review and user consent because the effective capabilities are broader than what is formally declared, making it easier for a skill to access secrets like API keys or make unexpected external requests without clear disclosure.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal