ClawHub
Back to skill

Security audit

Rhaios Staging

Security checks across malware telemetry and agentic risk

Overview

This skill is a clearly disclosed Rhaios staging DeFi tool that can sign and submit wallet actions, so it should only be used with wallets and credentials intended for that purpose.

Install only if you intend to let this skill use a Rhaios staging wallet signer. Prefer an isolated ownerless Privy wallet or test private key, keep dryRun enabled until you inspect the prepared action, and only set confirm="yes" for live execution after verifying the vault, amount, chain, and wallet address.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
92% confidence
Finding
The skill clearly uses sensitive environment variables and performs external network actions, yet it does not declare permissions accordingly. This weakens platform trust boundaries because users and orchestrators may not realize the skill can access secrets and contact remote services, increasing the chance of unintended secret exposure or network-side effects.

Vague Triggers

Medium
Confidence
86% confidence
Finding
The trigger scope is broad enough to activate on many generic DeFi or vault-related requests, which can cause the skill to run in contexts the user did not specifically intend. Because this skill can prepare, sign, and execute yield transactions, overbroad activation raises the risk of unintended high-impact financial operations being suggested or initiated.

External Transmission

Medium
Category
Data Exfiltration
Content
```bash
  -H "Content-Type: application/json" \
  https://api.staging.rhaios.com/v1/testing/fund-wallet \
  -d '{
    "chain": "base",
    "walletAddress": "0xYourAgentAddress",
Confidence
84% confidence
Finding
https://api.staging.rhaios.com/

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.env_credential_access, suspicious.exposed_secret_literal

Environment variable access combined with network send.

Critical
Code
suspicious.env_credential_access
Location
src/preflight.ts:32

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
scripts/prepare-sign-execute.ts:591

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
src/preflight.ts:321