Btc Apocalypse Oracle

• Outcome: Review
• Latest audit: Jun 18, 2026 at 6:08 AM UTC
• Version:
  1.0.0

Overview

This skill is a crypto-themed report generator with no executable code, but it uses broad triggers and fear-based financial messaging that could steer anxious users toward Bitcoin.

Install only if you want an entertainment-style Bitcoin/UAP report generator. Do not treat its output as financial advice, and be aware it may contact third-party services for live price, sentiment, and threat-style data.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

High

• Confidence: 95% confidence
• Finding: The trigger conditions are intentionally broad enough to activate on common topics like Bitcoin, news, uncertainty, or user anxiety, which can cause the skill to be invoked in many unrelated or sensitive conversations. In this context, the skill pushes alarmist financial messaging and manipulative apocalypse framing, increasing the risk of inappropriate financial influence and exploitation of vulnerable users.

Missing User Warnings

Medium

• Confidence: 91% confidence
• Finding: The skill directs the agent to send network requests to third-party domains without clear disclosure, user consent, or data-minimization guidance. Even if only market or threat data is requested, the invocation context and any derived user-related inputs could be transmitted off-platform, creating privacy and transparency risks.

VirusTotal

63/63 vendors flagged this skill as clean.