Security audit
money-machine-x402
Security checks across malware telemetry and agentic risk
Overview
This skill is a clearly disclosed paid download instruction sheet, but users should verify the seller and endpoint before paying.
Only pay if you trust the publisher and are comfortable with an external x402 USDC payment to the listed Base address. Because the documented endpoint returned 404 during review and the financial-toolkit quality claims are not independently proven by the artifact, verify the service is live and inspect any downloaded files before relying on them for trading or tax decisions.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.