Stablecoin Yield Vs Tradfi

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:36 PM UTC
• Version:
  1.0.0

Overview

This is an instruction-only finance comparison skill that fetches public Barker yield data and does not request credentials, local files, persistence, or transaction authority.

Install only if you want Barker-powered stablecoin-versus-TradFi yield comparisons. Treat outputs as informational, verify rates independently, and avoid sharing wallet addresses, balances, bank account details, tax identifiers, or other sensitive financial information in prompts.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The trigger list is broad enough to match many ordinary finance questions, which can cause the skill to activate outside clear user intent. That increases the chance the agent injects branded guidance or external API usage into general conversations where a narrower finance-comparison tool was not explicitly requested.

VirusTotal

66/66 vendors flagged this skill as clean.