Security audit

WalletPilot

Security checks for vulnerabilities and agentic risk

Overview

WalletPilot is a high-impact crypto wallet automation skill that is purpose-aligned but asks users to create and fund a wallet while its claimed safeguards and implementation are not included for review.

Review this carefully before installing. Do not fund a wallet or enter a seed phrase until you have the complete implementation, pinned dependencies, and verifiable enforcement for spend limits, allowlists, revocation, logging, and user confirmation for sends, swaps, approvals, and signatures. Use only minimal test funds or testnets.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T09 · Insecure Skill Coding Practices

Error

Location: SKILL.md:73
Finding: Wallet Funding and Automation Are Recommended Without Auditable Security Controls
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Warning

Location: SKILL.md:53
Finding: Unpinned and Unreviewable npm Dependency Installation
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (3)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The overview describes agent interaction with dapps and transaction execution through browser wallets, but it does not clearly and prominently warn that this automation can trigger real on-chain transactions affecting actual funds. The later mention of a separate wallet helps, but it does not fully communicate the severity of irreversible loss, approval risk, or the possibility of signing harmful payloads. In this context, under-warning is dangerous because the skill is explicitly designed to automate live wallet activity.
Content: No source excerpt is available for this finding.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 94% confidence
Finding: The setup instructions invoke npx playwright install chromium without pinning a specific package version. npx may resolve and execute whatever version is currently published or otherwise selected in the environment, creating a supply-chain risk during installation. In a skill intended for wallet automation, any compromise in the browser automation toolchain is especially sensitive because it could affect software that later handles real wallet interactions.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The skill exposes high-risk actions such as swap, send, and sign but does not place explicit warnings next to those commands about irreversible fund loss, malicious approvals, and phishing or signature abuse. Users may treat these as routine automation primitives and underestimate that message signing and contract interaction can authorize asset theft or unsafe approvals. Because this skill targets browser wallets, these actions directly map to financially sensitive operations.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.