Money Never Sleep
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed investment-tracking CLI helper that stores portfolio records locally and provides strategy suggestions without broker access or automatic trading.
Before installing, verify the npm package and GitHub repository are the package you intend to trust. Expect local portfolio data under ~/.mns, generated reports under ./reports unless configured otherwise, and network calls for market data. Do not treat generated strategy suggestions as financial advice or give an agent authority to place real brokerage trades based on them.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.