Security audit
Security checks across malware telemetry and agentic risk
The skill matches its ride-hailing purpose, but it needs review because it can book rides, charge cards or wallets, move USDC, store sensitive local state, and relay ride data with several consent and privacy gaps.
Review this before installing if you will connect real payment cards, a Privy wallet, or live ride accounts. Use host-level confirmation gates for every ride request, tip, card charge, deposit, withdrawal, and bridge transfer; treat ~/.amb as sensitive wallet and movement-history state; and avoid sharing debug zips unless you have reviewed them for ride, wallet, account, and location details.
Then `amb bridge-usdc-quote <wallet> <shortfall> --fast`. If it reports `below_min: true`, raise the amount to `min_usdc` — that is the smallest transfer the bridge accepts, so it is not a discretionary increase. If it reports `sufficient: false`, the source cannot cover even the shortfall: report that and stop, rather than retrying at a smaller amount that would not fix anything. If the quote reports `preauthorized: true`, run the Fast bridge **without asking** (~40 s, blocking) and report the amount and the actual fee afterwards. If `preauthorized` is `false`, ask — and offer the free 20-minute option alongside. **The CLI backs this up.** `bridge-usdc --fast` refuses with `BRIDGE_FEE_NOT_AUTHORIZED` when the fee it computes is not covered by a standing approval, so skipping the quote does not skip the ceiling, and a fee that grew since you quoted is refused rather than spent. Standard is unaffected — its fee is zero.
~/.amb/
├── data/
│ ├── ambient-ride.db SQLite (wallet metadata, ride state, dedup, ...)
│ └── .env AMB_RIDE_PASSPHRASE (created/preserved by install.js)
└── keys/
└── <wallet_id>_private.enc, <wallet_id>_public.pem
Encrypted Privy keys (decryptable only with the passphrase)- If the prebuilt binary cannot be downloaded, build from source: install `apt install build-essential python3` on Linux, Xcode Command Line Tools on macOS, or Visual Studio Build Tools on Windows, then re-run `install.js`. - Or set an internal mirror: `npm config set better_sqlite3_binary_host_mirror <internal_mirror>` then retry. For ABI mismatch (`Error: ... NODE_MODULE_VERSION`): make sure Node ≥ 18 is active (`node --version`), then `rm -rf ~/.amb/cli && node <SKILL_DIR>/scripts/install.js` (re-clone + re-install). If `npm i -g @ambprotocol/ride-cli` fails with `EACCES`, npm's global prefix is not writable by your user. Do **not** re-run it under `sudo`: the CLI deliberately skips state initialisation when it detects a sudo invocation (it reports `status: "skipped_sudo"`), because root-owned `~/.amb` state would lock you out of your wallet keys. Point npm at a user-writable prefix instead (`npm config set prefix ~/.local`) and make sure that prefix's `bin` directory is on your `$PATH`.
- If the prebuilt binary cannot be downloaded, build from source: install `apt install build-essential python3` on Linux, Xcode Command Line Tools on macOS, or Visual Studio Build Tools on Windows, then re-run `install.js`. - Or set an internal mirror: `npm config set better_sqlite3_binary_host_mirror <internal_mirror>` then retry. For ABI mismatch (`Error: ... NODE_MODULE_VERSION`): make sure Node ≥ 18 is active (`node --version`), then `rm -rf ~/.amb/cli && node <SKILL_DIR>/scripts/install.js` (re-clone + re-install). If `npm i -g @ambprotocol/ride-cli` fails with `EACCES`, npm's global prefix is not writable by your user. Do **not** re-run it under `sudo`: the CLI deliberately skips state initialisation when it detects a sudo invocation (it reports `status: "skipped_sudo"`), because root-owned `~/.amb` state would lock you out of your wallet keys. Point npm at a user-writable prefix instead (`npm config set prefix ~/.local`) and make sure that prefix's `bin` directory is on your `$PATH`.
- If the prebuilt binary cannot be downloaded, build from source: install `apt install build-essential python3` on Linux, Xcode Command Line Tools on macOS, or Visual Studio Build Tools on Windows, then re-run `install.js`. - Or set an internal mirror: `npm config set better_sqlite3_binary_host_mirror <internal_mirror>` then retry. For ABI mismatch (`Error: ... NODE_MODULE_VERSION`): make sure Node ≥ 18 is active (`node --version`), then `rm -rf ~/.amb/cli && node <SKILL_DIR>/scripts/install.js` (re-clone + re-install). If `npm i -g @ambprotocol/ride-cli` fails with `EACCES`, npm's global prefix is not writable by your user. Do **not** re-run it under `sudo`: the CLI deliberately skips state initialisation when it detects a sudo invocation (it reports `status: "skipped_sudo"`), because root-owned `~/.amb` state would lock you out of your wallet keys. Point npm at a user-writable prefix instead (`npm config set prefix ~/.local`) and make sure that prefix's `bin` directory is on your `$PATH`.
VirusTotal findings are pending for this skill version.
Detected: suspicious.dangerous_exec