ClawHub
Back to skill

Security audit

Grand Bazaar Swap

Security checks across malware telemetry and agentic risk

Overview

This is a real Base blockchain swap skill, but it can approve token spending and execute mainnet trades with raw private keys without strong user-confirmation controls.

Install only if you are comfortable reviewing every transaction yourself. Use isolated low-value wallets, verify the chain, token addresses, swap contract, recipient, amounts, fees, expiry, and approvals before running scripts, and require your own explicit confirmation before any approval, signature, cast, or swap is broadcast.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (5)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The README instructs users to export raw private keys into environment variables (`SIGNER_PRIVATE_KEY`, later also `SENDER_PRIVATE_KEY`) without any explicit warning about secret-handling risks. Even though this is documentation rather than executable exfiltration logic, it normalizes unsafe credential practices that can lead to accidental disclosure through shell history, logs, screenshots, shared terminals, CI environments, or copied command transcripts.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The script can automatically submit an on-chain approval using a raw private key from the environment as soon as allowance is insufficient, with no explicit interactive confirmation, dry-run gate, or approval summary before execution. In this skill context, the script is specifically designed to handle live swaps on Base, so accidental execution against the wrong token, spender, or amount can immediately grant spend permission and create real financial exposure.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
This script performs real on-chain approvals and later a live swap using private keys from the environment, with no interactive confirmation, dry-run mode, or explicit safety gate before broadcasting transactions. In the context of a skill meant to automate Grand Bazaar swaps on Base, this is genuinely risky because a user can unintentionally approve/spend funds on mainnet with default token and contract addresses, especially if environment variables are misconfigured or the script is run as part of an automated workflow.

Unpinned Dependencies

Low
Category
Supply Chain
Content
{
  "dependencies": {
    "ethers": "^5.8.0",
    "lz-string": "^1.5.0"
  }
}
Confidence
90% confidence
Finding
"ethers": "^5.8.0"

Unpinned Dependencies

Low
Category
Supply Chain
Content
{
  "dependencies": {
    "ethers": "^5.8.0",
    "lz-string": "^1.5.0"
  }
}
Confidence
86% confidence
Finding
"lz-string": "^1.5.0"

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.