Security audit
Clicks Protocol
Security checks across malware telemetry and agentic risk
Overview
This skill is a read-only Clicks Protocol inspection helper that discloses its network calls and does not handle keys, sign transactions, or persist data.
Before installing, understand that this is finance-adjacent and uses a remote MCP endpoint to query live protocol information. It appears safe for read-only inspection, but any SDK or local MCP write flow involving USDC should only be used with explicit human review and transaction signing outside this skill.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.