ClawHub
Back to skill

Security audit

Baozi Prediction Markets

Security checks across malware telemetry and agentic risk

Overview

This skill is mostly coherent for Solana prediction-market use, but it should be reviewed because it can trigger wallet-linked betting workflows and describes automatic affiliate registration without clear opt-in.

Install only if you trust Baozi and the external @baozi.bet/mcp-server package. Keep BAOZI_LIVE unset until you intentionally want live betting, never provide private keys, verify every wallet prompt, and avoid first-use affiliate registration unless you explicitly want a wallet-linked affiliate code.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill states it will automatically register an affiliate code on first use if one is not already present, but it does not require an explicit user consent step or warn that an on-chain action may occur. In a betting and wallet-linked context, silently initiating account-affecting registration can cause unauthorized transactions, unexpected wallet prompts, or user confusion about what actions are being taken on their behalf.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.