Purchase Anonymous Data eSIM (Crypton.sh)

• Outcome: Pass
• Latest audit: Sep 10, 2026 · 9:38 AM UTC
• Version: 1.0.0

Overview

This skill does what it says: it contacts Crypton to browse, create, and check eSIM orders, with no evidence of hidden code execution, persistence, or unrelated data access.

Install only if you are comfortable sending country searches, package IDs, payment-method choices, and order IDs to Crypton. Treat ICCIDs, activation codes, QR payloads, payment links, and order UUIDs as sensitive and avoid sharing logs or screenshots that contain them. Consider pinning dependencies and adding an explicit confirmation step before checkout creation in sensitive environments.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• YARA Signatures: Malware Match, Webshell Match, Cryptominer Match
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration

Findings (12)

YARA rule 'ransomware_behavior': Ransomware-like patterns (mass encryption, ransom notes) [malware]

Critical

• Category: YARA Match
• Confidence: 80% confidence

Finding

YARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).

Content

Scanner excerpt · README.md (reported line 3)May include surrounding context.

md

# Crypton eSIM Skill for OpenClaw

Purchase anonymous eSIMs directly from chat. Pay with Bitcoin, Monero, or card.

## Features

- Browse eSIM plans for 170+ countries
- Purchase without creating an account
- Pay with BTC, XMR, or credit card
- Check order status and get activation codes
- No API key required

## Installation

1. Copy this folder to your OpenClaw skills directory
2. The skill will be automatically loaded

## Usage

### Commands

| Command | Description |
|---------|-------------|
| `esim` | List available countries |
| `esim [country]` | Show plans for a country |
| `buy [package_id] with [btc/xmr/card]` | Purchase an eSIM |
| `status [order_uuid]` | Chec

YARA rule 'ransomware_behavior': Ransomware-like patterns (mass encryption, ransom notes) [malware]

Critical

• Category: YARA Match
• Confidence: 80% confidence

Finding

YARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).

Content

Scanner excerpt · SKILL.md (reported line 8)May include surrounding context.

md

---
name: crypton-esim
description: Purchase anonymous eSIMs with BTC/XMR/card - no account required
---

# Crypton eSIM

Purchase anonymous eSIMs directly from chat. Pay with Bitcoin, Monero, or card - no account required.

## Triggers

- esim
- e-sim
- mobile data
- travel data
- buy esim
- get esim
- data plan
- roaming

## Commands

### esim
Browse and purchase eSIMs for 170+ countries.

**Usage:** `esim [country]`

**Examples:**
- `esim` - Show available countries
- `esim germany` - Show plans for Germany  
- `esim DE` - Show plans by country code

### buy
Purchase an eSIM plan with your preferred payment method.

**Usage:** `buy [package_id] with [payment_method]`

**Payment methods:** `btc`, `xmr`, `card` (or `stripe`)

**Examples:**
- `buy DE_1_7 wi

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 170)May include surrounding context.

md

- `SKILL.md` - This file

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The README shows ICCID values and activation codes returned by the skill but does not warn that these are sensitive telecom credentials. If exposed in chat history, logs, screenshots, or shared terminals, another party could potentially provision or misuse the eSIM profile, causing service theft or loss of user control over the purchased plan.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

The README documents the external Crypton guest API and purchase workflow but does not clearly warn users that commands such as plan lookup, checkout, payment-method selection, and order-status checks send data to a third-party service. In a chat-agent context, users may assume actions are local or minimally disclosed, so the missing notice increases the risk of unintended data sharing and privacy harm.

Content

No source excerpt is available for this finding.

Undeclared Tool Scope

Medium

• Category: MCP Least Privilege
• Confidence: 93% confidence

Finding

The skill documents network-backed functionality and an external API but does not declare any tool scope, permissions, or allowed-tools restrictions. This creates a governance gap: an agent may invoke network access without explicit user/admin visibility, increasing the risk of unintended outbound requests and exfiltration of purchase, device, or telecom-related data.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The skill promotes anonymous eSIM purchases and order tracking through a third-party guest API but does not warn users that their country selections, order identifiers, payment choices, ICCID, and activation details may be sent to or retrieved from an external service. The lack of transparency can mislead users about privacy expectations, particularly given the anonymity-focused marketing language.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The trigger list contains broad, everyday phrases such as 'mobile data', 'travel data', 'data plan', and 'roaming' that can match normal conversation unrelated to an explicit purchase intent. This raises the chance of accidental invocation, which is especially risky here because the skill can initiate commerce flows and transmit user queries to a third-party service.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The purchase flow immediately sends the selected package ID, payment method, and optional email to a third-party API when a user phrases a message as a purchase command, without an explicit confirmation or clear disclosure at the action point. In an agent setting, this can cause unintended external transactions, leak user purchase intent and identifiers to a remote service, and surprise users who may not realize their message triggers a live checkout request.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low

• Category: Not specified by scanner
• Confidence: 88% confidence

Finding

The status command forwards a user-supplied order UUID directly to the remote Crypton API without an explicit notice that the identifier will be shared externally. While lower risk than checkout creation, this still transmits potentially sensitive order metadata to a third party and may enable inadvertent disclosure or probing of order existence/status if users paste identifiers they did not intend to send.

Content

No source excerpt is available for this finding.

Unpinned Dependencies

Low

• Category: Supply Chain
• Confidence: 95% confidence

Finding

The dependency is specified as requests>=2.28.0, which allows installation of many different future or currently vulnerable versions and prevents reproducible builds. In a security-sensitive skill that may handle purchasing flows, network traffic, or payment-related interactions, leaving a widely used HTTP library unpinned increases supply-chain and patch-management risk.

Content

Scanner excerpt · requirements.txt (reported line 1)May include surrounding context.

text

requests>=2.28.0

Unverifiable Dependency: requests has 16 known advisory(ies) (CVE-2014-1830 (Exposure of Sensitive Information to an Unauthorized Actor in Requests); CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi) +13 more), but the manifest does not pin a version, so it is unknown whether the installed release is affected

Low

• Category: Supply Chain
• Confidence: 91% confidence

Finding

Because requests is not pinned, it is impossible to verify from this manifest whether deployment will use a release affected by known advisories, including credential leakage and TLS/verification issues. Given the skill's context involves anonymous eSIM purchase and likely external HTTP calls, a vulnerable requests version could expose sensitive network interactions or authentication material if the code later uses affected features.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.