Security audit
BTCvision Donation Nudge
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed donation reminder that only fetches BTCvision funding progress and shows donation options when the user asks or has opted in.
Install only if you want an agent to surface BTCvision donation reminders in the narrow contexts described. Be aware it can send a funding-progress request to btcvision.org and may show a Lightning address or payment link, but it does not have authority to access your wallet or make payments.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.