Agent Reputation Tracker

• Outcome: Pass
• Latest audit: May 29, 2026, 8:29 PM
• Version:
  1.1.0

Overview

This skill coherently summarizes local betting performance and has a visible optional workflow for publishing derived profile stats to Moltbook.

Install only if you want an agent to analyze your local betting log. Treat the generated profile as sensitive because it can reveal wager volume, profit/loss, ROI, platforms used, and activity dates. Provide MOLTBOOK_API_KEY and publish only when you intend to share those derived stats with Moltbook.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 88% confidence
• Finding: The skill includes a workflow that publishes locally derived betting-history statistics to an external service, but the description and flow do not prominently warn about data exfiltration or require an explicit consent checkpoint. In an agent context, broad invocation combined with a publish path can cause unintended disclosure of sensitive behavioral or financial data to a third party.

VirusTotal

66/66 vendors flagged this skill as clean.