ClawHub
Back to skill

Security audit

Crypto Market

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward cryptocurrency market-data helper that fetches public CoinGecko data and does not show hidden persistence, credential access, or destructive behavior.

Before installing, review the dependency version policy and consider pinning or constraining requests to a currently patched version. The skill sends coin IDs, currency choices, and market-query parameters to CoinGecko, which is expected for live price lookup and does not require credentials.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
94% confidence
Finding
The skill documentation and examples clearly indicate network-capable behavior through Python scripts that call the CoinGecko public API, but the metadata only declares `allowed-tools: Bash(python:*) Read` and does not explicitly declare a network permission. This creates a permissions transparency gap: an agent or reviewer may underestimate the skill's external communication and data exfiltration potential, especially because Bash/Python can make arbitrary outbound requests once invoked.

Unpinned Dependencies

Low
Category
Supply Chain
Content
requests>=2.28.0
Confidence
94% confidence
Finding
The dependency is specified as `requests>=2.28.0`, which is unpinned and allows installation of different versions over time. This weakens build reproducibility and can inadvertently pull in a vulnerable or incompatible release through fresh installs or CI runs, increasing supply-chain risk.

Known Vulnerable Dependency: requests==2.28.0 — 8 advisory(ies): CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi); CVE-2026-25645 (Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility func) +5 more

High
Category
Supply Chain
Confidence
78% confidence
Finding
The version range `requests>=2.28.0` includes `requests==2.28.0`, which is called out as having multiple known advisories. Because the requirement does not exclude vulnerable versions, an environment resolving to 2.28.0 or another affected release could expose the skill to issues in outbound HTTP handling, which is relevant because this skill fetches remote cryptocurrency data from a public API.

Static analysis

No suspicious patterns detected.