ClawHub
Back to skill

Security audit

Solana Scam Detector

Security checks across malware telemetry and agentic risk

Overview

This appears to be a lightweight Solana token checker with accuracy caveats, but no evidence it steals keys, signs trades, or persists on the machine.

Install only if you want a simple heuristic checker. Do not provide wallet keys, and do not rely on this alone before trading: it does not verify liquidity despite exposing a liquidity config value, and user-added blacklist rules can affect later checks in the same running process.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Tp4

High
Category
MCP Tool Poisoning
Confidence
92% confidence
Finding
The skill claims to be a simple read-only detector, but the broader behavior includes modifying blacklist state and advertising liquidity-related configuration that is not actually enforced. This mismatch can mislead users and downstream agents into overtrusting the detector's coverage, causing unsafe trading decisions or silent policy changes that affect future results.

VirusTotal

1/58 vendors flagged this skill as malicious, and 57/58 flagged it as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.