ClawHub
Back to skill

Security audit

KarmaBank

Security checks across malware telemetry and agentic risk

Overview

Review before installing: this finance-oriented skill asks for wallet credentials and advertises USDC borrowing/wallet actions without enough scoping or reviewed implementation.

Install only after reviewing the full source and the external Circle wallet dependency. Use mock or testnet credentials, avoid production Circle secrets, require confirmation for wallet/borrow/repay actions, and update/pin vulnerable dependencies before any real financial use.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (8)

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The skill advertises borrowing USDC and creating wallets as simple commands but provides no warning that these actions may trigger external network operations or interact with real financial infrastructure if live credentials are configured. This increases the risk that an agent or operator will invoke the commands in an unsafe context, leading to unintended wallet creation, token movement, or financial side effects.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The configuration section instructs users to supply sensitive API credentials for Moltbook and Circle without any security guidance on secret handling, storage, or the consequences of enabling external service access. In an agent-skill context, this can normalize pasting production secrets into insecure environments and can lead to unauthorized wallet operations or exposure of financial account access.

Unpinned Dependencies

Low
Category
Supply Chain
Content
"typescript": "^5.9.3"
  },
  "dependencies": {
    "@circle-fin/developer-controlled-wallets": "^10.1.0",
    "@circle/openclaw-wallet-skill": "file:../skills/circle-wallet",
    "@types/uuid": "^10.0.0",
    "axios": "^1.13.4",
Confidence
75% confidence
Finding
"@circle-fin/developer-controlled-wallets": "^10.1.0"

Unpinned Dependencies

Low
Category
Supply Chain
Content
"@circle-fin/developer-controlled-wallets": "^10.1.0",
    "@circle/openclaw-wallet-skill": "file:../skills/circle-wallet",
    "@types/uuid": "^10.0.0",
    "axios": "^1.13.4",
    "commander": "^14.0.3",
    "dotenv": "^17.2.3",
    "node-forge": "^1.3.3",
Confidence
93% confidence
Finding
"axios": "^1.13.4"

Unpinned Dependencies

Low
Category
Supply Chain
Content
"axios": "^1.13.4",
    "commander": "^14.0.3",
    "dotenv": "^17.2.3",
    "node-forge": "^1.3.3",
    "uuid": "^13.0.0"
  }
}
Confidence
92% confidence
Finding
"node-forge": "^1.3.3"

Known Vulnerable Dependency: axios==1.13.4 — 10 advisory(ies): CVE-2026-44494 (axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `co); CVE-2026-44495 (axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollut); CVE-2025-62718 (Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF) +7 more

High
Category
Supply Chain
Confidence
97% confidence
Finding
axios==1.13.4

Known Vulnerable Dependency: node-forge==1.3.3 — 4 advisory(ies): CVE-2026-33896 (Forge has a basicConstraints bypass in its certificate chain verification (RFC 5); CVE-2026-33891 (Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Ze); CVE-2026-33894 (Forge has signature forgery in RSA-PKCS due to ASN.1 extra field ) +1 more

High
Category
Supply Chain
Confidence
98% confidence
Finding
node-forge==1.3.3

Known Vulnerable Dependency: uuid==13.0.0 — 1 advisory(ies): CVE-2026-41907 (uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided)

Low
Category
Supply Chain
Confidence
70% confidence
Finding
uuid==13.0.0

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.