create-rustchain-agent
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed local scaffolder for a RustChain agent and wallet, with no artifact-backed evidence of hidden exfiltration or destructive behavior.
Install only if you intend to create a RustChain wallet and agent. Treat the generated wallet.json as a real secret: back it up securely, do not commit it, and understand that enabling the generated MCP config gives rustchain-mcp access to that wallet path. Use --register only when you are ready to perform a network write.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
2/64 vendors flagged this skill as malicious, and 62/64 flagged it as clean.