Security audit
Vibe Trading
Security checks across malware telemetry and agentic risk
Overview
This finance research skill is broad and handles sensitive trading data, but its capabilities are disclosed and fit its stated purpose.
Before installing, be aware this is a powerful finance research integration. Only connect broker accounts, OAuth profiles, local journal files, or external MCP servers you trust, and review any optional credentials or ~/.vibe-trading configuration you provide.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.