ApeWisdom Reddit Scanner

• Outcome: Pass
• Latest audit: May 27, 2026, 9:37 PM
• Version:
  1.0.0

Overview

This is a simple read-only Reddit market-sentiment scanner that contacts ApeWisdom and prints results.

Install only if you are comfortable with the skill contacting ApeWisdom for live data. Treat the output as informational market-sentiment data, not financial advice, and make sure your Python environment has the requests dependency available.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 94% confidence
• Finding: The skill instructs users to run a Python script that fetches live data from the ApeWisdom API, which is a network-capable operation, but the skill metadata does not declare any corresponding permission. Undeclared network access reduces transparency and weakens policy enforcement, making it easier for a skill to access external services without explicit review or user awareness.

VirusTotal

63/63 vendors flagged this skill as clean.