Crypto Whale Intelligence

• Outcome: Pass
• Latest audit: May 28, 2026, 5:10 AM
• Version:
  1.0.0

Overview

This skill is a sparse crypto-trading analytics description with no code, install steps, persistence, or credential-handling instructions in the artifact.

Install only if you want crypto market-analysis prompts or workflows. Do not provide seed phrases, private keys, exchange credentials, or unrestricted trading-bot access; use read-only wallet addresses or tightly scoped API keys, and require explicit confirmation before any real trade.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The skill description is extremely broad and advertises many high-risk financial trading uses, but it does not define clear activation boundaries, allowed tasks, or safety constraints. In an agent environment, this can cause the skill to be invoked for ambiguous or overly broad requests, increasing the chance it will be used for speculative trading decisions, market-manipulation-adjacent behavior, or unsupported financial guidance without proper guardrails.

VirusTotal

VirusTotal findings are pending for this skill version.