ClawHub
Back to skill

Security audit

ghostbot-uniswap-v4

Security checks across malware telemetry and agentic risk

Overview

This Sepolia DeFi skill appears aligned with its stated purpose, but it can sign wallet transactions and does not give users enough safeguards before doing so.

Review before installing. Use only a throwaway Sepolia wallet and never a mainnet or valuable private key. Treat add-liquidity and post-signal as real wallet-signed transactions: verify the RPC network, wallet address, contract addresses, token amounts, approvals, tick range, autoRebalance setting, and oracle signal details before running them.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Vague Triggers

Medium
Confidence
92% confidence
Finding
The skill description is broad enough to trigger on general DeFi and AMM questions, increasing the chance that an agent invokes a transaction-capable skill in contexts that only require informational assistance. In this skill, that matters because the same document also instructs the agent to run local scripts that interact with a wallet and blockchain, so over-selection can lead users into operational flows with unnecessary financial or approval actions.

Missing User Warnings

Medium
Confidence
98% confidence
Finding
The skill tells the agent to run scripts that can mint tokens, approve contracts, and add liquidity, but it does not clearly and prominently warn that these are on-chain transactions executed from the configured wallet. Even on Sepolia, approvals and state-changing transactions normalize unsafe behavior, may consume funds, and can be especially risky because the skill mentions a built-in demo wallet and optional private-key configuration, creating a path to unintended signing and asset exposure.

Unpinned Dependencies

Low
Category
Supply Chain
Content
"type": "module",
  "private": true,
  "dependencies": {
    "viem": "^2.20.0"
  }
}
Confidence
90% confidence
Finding
"viem": "^2.20.0"

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.