Back to skill

Security audit

Banking Agent OS

Security checks across malware telemetry and agentic risk

Overview

This banking skill is coherent and not malicious, but it needs review because it documents high-impact account and transfer operations without enough sandboxing, authorization, or data-handling safeguards.

Install only for a controlled evaluation or sandboxed banking backend. Use synthetic accounts and test data, bind the server to localhost or a private test network, verify the external packages and source repository before running them, add authentication and explicit approval before any account or transaction mutation, and avoid sending real account numbers, PII, or sensitive transaction details to AI endpoints unless you have consent and an appropriate data-handling policy.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill provides concrete account creation and fund transfer examples for a banking system without any prominent warning to use only test data or a sandbox environment. In a finance context, this can lead users or agents to perform real monetary operations against a live backend, causing unintended account creation, balance changes, or transfers.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill provides account creation and fund transfer examples for a banking system without any warning that these actions may affect real financial records or require explicit human confirmation. In a finance context, normalizing direct execution of money-moving operations can lead an agent or user to perform unintended transfers, account creation, or other state-changing actions without adequate safeguards.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The AI service examples encourage sending banking-related prompts and transaction data to an OpenAI-powered endpoint but do not disclose that potentially sensitive financial information may be transmitted to an external AI provider. In a banking skill, omission of this disclosure increases privacy, compliance, and data-handling risk because users may submit account or transaction details assuming they remain local.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.