ClawHub
Back to skill

Security audit

Cardano Transactions

Security checks for vulnerabilities and agentic risk

Overview

This skill clearly does what it says, but it can sign and broadcast real Cardano transactions using wallet secrets and its safeguards are not strong enough for that level of risk.

Review this carefully before installing. Only use it with a wallet and funds you are prepared to risk, and independently verify every transaction in a trusted wallet or explorer before approving. Prefer a pinned and audited MCP package, a hardware wallet or scoped signer instead of a raw seed phrase, and strict isolation for any process that can access wallet secrets.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)

T08 · Insecure Dependencies

Error
Location
SKILL.md:11
Finding

Unpinned wallet dependency with access to the seed phrase

Content
View full analysis
Remediation
View remediation

T09 · Insecure Skill Coding Practices

Error
Location
sub-skills/submit-tx.md:3
Finding

Transaction confirmation is not bound to deterministic CBOR decoding

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The tool description says 'Sign and submit a Cardano transaction from the connected wallet' but does not prominently warn that invoking it will authorize a real wallet signature and broadcast an on-chain transaction. In an agentic context, this omission can cause users or downstream agents to underestimate the action's financial finality, increasing the risk of unintended asset transfers or irreversible submissions.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.