Portal Token Discovery
Security checks across malware telemetry and agentic risk
Overview
This is an informational crypto-token reference skill with public links and optional CoinGecko market-data lookup, and it shows no hidden execution or privileged behavior.
This appears safe to install as an information-only PORTAL token lookup skill. Because crypto contract addresses and market data can affect financial decisions, independently verify links and addresses before transferring funds or trading.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.