Skills/Glama/ar-data-agent

ar-data-agent@0.2.3

VERIFIED

Publisher claims: "Enables MCP clients to fetch Argentine USD/ARS quotes, INDEC inflation data, and national holidays, validate CUIT/CBU identifiers, and generate Ripio wARS on-ramp links, with paid calls settled per use in wARS on Celo via x402 or free quote mode." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry GlamaPublisher landingen24h · publishing for 1 daysInstalls 0Last detonated 40 min ago
$npx skills add ar-data-agent
WatchReport an issue

Coverage

Server started and answered tools/list.
Tested
MCP initialize and tools/list · every tool description, for hidden instructions · every file read, file written and host contacted by what ran
Not tested
what the tools do when called with real credentials

Before you give it your token

It will ask for
AGENT_PRIVATE_KEYAR_AGENT_PRIVATE_KEYBUY_PRIVATE_KEYBUYER_PRIVATE_KEYX402_API_KEYConfiguration, not credentials: AGENT_ADDRESS, AGENT_ID, AGENT_REGISTRY, AR_AGENT_ASSET, AR_AGENT_MAX_WARS, AR_AGENT_PAY_TO, AR_AGENT_URL, BASE_PATH, BRIEF_GUARD, BUY_ASSET, BUY_ENABLED, BUY_MAX_PER_DAY, CELO_RPC, FACILITATOR_URL, PAY_TO, PUBLIC_URL
Where it talks to
no vendor host named in the codeAlso celo.org, landingen24h.com, ripio.com, ethereum.org, usebuy.ai, unpkg.com, dolarapi.com, argentinadatos.com — not the publisher's domain; check what for before connecting.
What the honeypot saw
no credential files read · no network
What we could not test
what the tools do when called with real credentials

Connect it with a scoped credential, under the guard, and read the third-party hosts first. The code names celo.org, landingen24h.com, ripio.com, ethereum.org, usebuy.ai, unpkg.com, dolarapi.com, argentinadatos.com as well as its own vendor. The guard injects AGENT_PRIVATE_KEY, AR_AGENT_PRIVATE_KEY, BUY_PRIVATE_KEY, BUYER_PRIVATE_KEY, X402_API_KEY only into requests to the host you bind (and its subdomains) and refuses the rest.

$vet-skills run --net declared -- <the server's command>

Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios) on 2026-11-14 and scored it 90/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 46 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
25sprocessdependency install exit 0
45sclaimed6 tools: ar_dolar, ar_inflacion, ar_feriados, ar_cuit, ar_cbu, ar_ramp_link
45stools89e0176164bc9d7d
45stoolsf8868112cfb3a47b
45stools0c6b59e970fab555
45stools0352bad025937b62
45stoolsb1df88d4b4b7c91c
45stoolse94ef80e7b8753f0
45sprocessscript backend runs setup only
45sprocessno install scripts to re-run

Static findings

No findings across 5,857 lines in 32 files.

Cost to the agent

Instructions loaded
≈38 tok
1 file · 32 in bundle
Tool list per prompt
≈540 tok
6 tools · 90 per tool
Handshake
1108 ms
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 110

Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.