Ripley Pocket For Monero

• Outcome: Review
• Latest audit: May 29, 2026 at 9:25 PM UTC
• Version:
  1.0.1

Overview

This skill is a disclosed cryptocurrency payment API helper, but it gives agents broad funds-moving authority without clear confirmation controls.

Install only if you intend to let an agent use Ripley Pocket. Use a dedicated low-balance account, protect and rotate the API key, and require manual confirmation for every payment, withdrawal, swap, deposit, or XMR402 payment after checking recipient, amount, network, fees, and irreversibility.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The trigger text is overly broad and includes generic payment-integration requests, which can cause the skill to activate in contexts where the user did not explicitly ask to move funds or interact with this provider. In a payment skill that supports withdrawals, swaps, and irreversible transfers, accidental invocation materially increases the chance of unauthorized or mistaken financial actions.

Missing User Warnings

High

• Confidence: 98% confidence
• Finding: The documentation enables irreversible payment, withdrawal, and cross-chain swap operations without mandating a user confirmation or safety interlock. Because these actions transfer value externally and may be non-recoverable, an agent following this skill could execute destructive financial operations from ambiguous, injected, or misinterpreted instructions.

VirusTotal

62/62 vendors flagged this skill as clean.