ClawHub
Back to skill

Security audit

Nudge Marketplace

Security checks across malware telemetry and agentic risk

Overview

This skill appears to be a real marketplace guide, but its crypto payment instructions are inconsistent and its example code handles wallet private keys unsafely.

Browsing listed agents appears low risk. Before submitting an agent or paying, verify the official site, live API response, token contract, chain, amount, and recipient wallet independently. Do not paste a valuable private key into an agent or code sample; use a dedicated low-balance wallet or external signer and manually review the transaction.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (5)

Intent-Code Divergence

Medium
Confidence
96% confidence
Finding
The skill describes the listing fee as '$0.10 in $NUDGE tokens' while the 402 example expresses the required currency as USDC, creating an internal contradiction about what asset should actually be transferred. Users following the wrong section may send the wrong token, and blockchain transfers are typically non-reversible.

Intent-Code Divergence

Medium
Confidence
96% confidence
Finding
The skill describes the listing fee as '$0.10 in $NUDGE tokens' while the 402 example expresses the required currency as USDC, creating an internal contradiction about what asset should actually be transferred. Users following the wrong section may send the wrong token, and blockchain transfers are typically non-reversible.

Intent-Code Divergence

Medium
Confidence
98% confidence
Finding
The TypeScript example performs an ERC-20 transfer of the NUDGE token even though the documented x402 response says the payment currency is USDC. Developers may copy the sample directly, causing payments in an unsupported asset and potentially losing funds while believing they completed the required fee.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill instructs users to send a token payment but omits an explicit warning that blockchain transfers are irreversible and must be verified carefully. In the presence of already conflicting payment details, the absence of safety guidance materially increases the chance of accidental fund loss.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The TypeScript example asks the caller to provide a private key and then immediately uses it to sign a token transfer, without warning about key handling, secure storage, or the spending of real funds. This is dangerous because developers may embed raw private keys in code, logs, or unsafe environments, risking wallet compromise and unauthorized transactions.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.