Portfolio Copilot

• Outcome: Review
• Latest audit: May 29, 2026 at 9:30 PM UTC
• Version:
  1.0.0

Overview

This read-only Paradex portfolio skill is coherent, but its generic trigger phrases could expose private financial account data when the user meant another account or briefing.

Install only if you want an agent to summarize your Paradex account data. Prefer explicit prompts such as "Paradex balance" or "Paradex portfolio status", and grant only read-only Paradex MCP permissions where possible.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The skill advertises very broad conversational triggers such as "my account," "how did I do," and "show me my stuff," which can cause it to activate on ambiguous requests and unnecessarily access sensitive portfolio and trading data. In a financial context, over-invocation is particularly risky because it may expose private account balances, positions, and performance when the user did not clearly intend to request Paradex account data.

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The description states that the skill can access account status, balances, positions, P&L, and trade history, but it does not warn that invoking the skill may retrieve sensitive financial data. In a portfolio-analysis skill, this omission increases the chance of users or orchestrators invoking it without clear awareness that private financial information will be accessed and summarized.

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The trigger phrase "Status" is extremely generic and can match many unrelated user requests, increasing the chance this portfolio skill activates when the user did not intend to access Paradex account data. In a finance/account context, unintended activation is more sensitive because it may expose private portfolio summaries or cause the assistant to answer from the wrong capability.

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The phrase "Give me a briefing" is ambiguous and not sufficiently tied to Paradex, so the skill could trigger for general requests about news, meetings, or other domains. Because this skill surfaces sensitive financial/account information, broad activation raises the risk of privacy leakage and incorrect tool routing.

Vague Triggers

Medium

• Confidence: 96% confidence
• Finding: The trigger phrase "Balance" is too broad and can refer to banking, gift cards, energy balance, or many non-Paradex topics, making accidental activation likely. In this skill's context, accidental invocation could reveal equity, free margin, or withdrawal-related information from a user's trading account.

VirusTotal

63/63 vendors flagged this skill as clean.