Planet Express Marketplace

• Outcome: Review
• Latest audit: May 28, 2026 at 11:49 AM UTC
• Version:
  2.0.0

Overview

This is a clearly disclosed blockchain file marketplace skill, but it guides agents through real payment and public listing flows without strong user-confirmation or transaction-safety boundaries.

Install only if you are comfortable with an agent helping with blockchain marketplace actions. Before any purchase or listing, manually verify the exact cost, chain, contract or recipient, wallet prompt, listing or file details, and remember that on-chain payments and public listings may be irreversible.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 96% confidence
• Finding: The skill gives step-by-step instructions for initiating paid blockchain marketplace actions, including x402 payment retries and listing fees, but does not clearly warn that these payments may be real, irreversible, and subject to chain-specific fees or loss from incorrect transactions. In an agent setting, this increases the chance that a user or automation triggers a purchase or listing payment without informed consent, especially because the skill is marked user-invocable and presents the payment flow as routine API usage.

VirusTotal

66/66 vendors flagged this skill as clean.