Security audit
Crypto Payments
Security checks across malware telemetry and agentic risk
Overview
This skill is a clearly disclosed Shieldz payment-link helper that requires user confirmation before sending payment details to a third-party service.
Install only if you are comfortable with an agent sending wallet addresses, payment amounts, memos or titles, optional email addresses, and manage tokens to Shieldz. Treat manage_url and manage_token like passwords, and only approve creation after checking the wallet, chain, asset, amount, memo, and email choice.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.