eToro Trading API

• Outcome: Review
• Latest audit: May 28, 2026, 11:52 AM
• Version:
  1.0.0

Overview

This skill is openly an eToro trading integration, but it gives an agent live financial trading authority by default without clear confirmation safeguards.

Install only if you intentionally want an agent to interact with an eToro account. Use demo or read-only credentials where possible, do not provide live-trading credentials casually, and require manual confirmation outside the skill before any real trade, order cancellation, public post, or credential-bearing request log.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Missing User Warnings

High

• Confidence: 96% confidence
• Finding: The skill explicitly states that trading tools default to real mode unless demo is explicitly requested, creating a direct path to unintended live financial transactions. In an agent setting, this is especially dangerous because ambiguous user prompts or automation could trigger irreversible real-money trades without an explicit confirmation safeguard.

Ssd 3

Medium

• Confidence: 94% confidence
• Finding: Logging full trading request details can capture sensitive order information, account identifiers, and potentially authentication headers or tokens if requests are serialized naively. In a trading skill, such logs may expose private financial activity and credentials to operators, downstream systems, or anyone with log access.

VirusTotal

61/61 vendors flagged this skill as clean.