Security audit
Doppel ERC-8004
Security checks across malware telemetry and agentic risk
Overview
This is a transparent guide for registering an onchain agent identity, but users should handle wallet keys and public blockchain actions carefully.
Install only if you are comfortable creating and funding a blockchain wallet and publishing long-lived public agent metadata. Use a fresh low-balance wallet, do not print or paste the private key into shared logs or chats, keep .env out of source control, verify the contract address and transaction before signing, and understand that linking sends your wallet address and ERC-8004 agent ID to Doppel.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.