Crypto Address Sentinel

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:37 PM UTC
• Version:
  1.0.0

Overview

This instruction-only crypto wallet monitoring skill is coherent and disclosed, with privacy considerations around watched addresses and optional webhook alerts.

Safe to install as a monitoring instruction skill. Treat wallet addresses and alert contents as sensitive, use only trusted webhook URLs, and do not provide private keys, seed phrases, or signing permissions.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The invocation phrase "addresses" is overly generic and can easily appear in normal conversation about crypto wallets, contact info, or general discussion. In an agent environment, this increases the chance of accidental skill activation and unintended access to monitoring actions or address-related data, especially because the skill is explicitly designed to inspect watched wallet addresses.

VirusTotal

64/64 vendors flagged this skill as clean.