Security audit

KarmaBank

Security checks across malware telemetry and agentic risk

Overview

KarmaBank has a coherent USDC borrowing purpose, but it exposes wallet and borrowing actions without enough safety boundaries for a financial agent skill.

Review carefully before installing. Use only sandbox or test credentials, inspect the complete CLI implementation and Circle wallet dependency before running it, and require explicit human approval and strict limits for wallet creation, borrowing, repayment, or any operation that could affect funds or obligations.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (6)

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The README instructs users to perform wallet creation and borrowing operations involving funds and credit without any warning that these actions can create financial obligations, affect external accounts, or trigger on-chain/payment-side effects. In an agent skill context, operational docs are often used directly by autonomous systems or operators, so missing safety language increases the chance of unintended borrowing, mistaken wallet creation, or misuse of real credentials against live services.

Missing User Warnings

Low

Confidence: 88% confidence
Finding: The README lists API credential variables for Moltbook and Circle but does not warn users that these are sensitive secrets that must not be committed, logged, or shared. In a skill meant to be installed and configured by agents or developers, omission of basic secret-handling guidance materially raises the risk of credential leakage through shell history, screenshots, repositories, or verbose logs.

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The skill explicitly references real Circle wallet creation and live financial credentials but does not warn users about the risks of using production API keys, handling secrets, or creating wallets that may interact with real funds. In a financial skill, missing safety guidance can lead operators to expose credentials, accidentally use live infrastructure, or misunderstand the consequences of wallet operations.

Known Vulnerable Dependency: axios==1.13.4 — 10 advisory(ies): CVE-2026-44494 (axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `co); CVE-2026-44495 (axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollut); CVE-2025-62718 (Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF) +7 more

High

Category: Supply Chain
Confidence: 94% confidence
Finding: axios==1.13.4

Known Vulnerable Dependency: node-forge==1.3.3 — 4 advisory(ies): CVE-2026-33896 (Forge has a basicConstraints bypass in its certificate chain verification (RFC 5); CVE-2026-33891 (Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Ze); CVE-2026-33894 (Forge has signature forgery in RSA-PKCS due to ASN.1 extra field ) +1 more

High

Category: Supply Chain
Confidence: 95% confidence
Finding: node-forge==1.3.3

Known Vulnerable Dependency: uuid==13.0.0 — 1 advisory(ies): CVE-2026-41907 (uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided)

Low

Category: Supply Chain
Confidence: 73% confidence
Finding: uuid==13.0.0

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.