ClawHub
Back to skill

Security audit

usd1 transfer

Security checks across malware telemetry and agentic risk

Overview

This appears to be a real testnet token-transfer skill, but it needs review because it takes a wallet private key and can send tokens immediately without a built-in confirmation step.

Install only for disposable testnet wallets and only when you are comfortable giving the skill a private key that can authorize transfers. Verify the token, amount, chain, and recipient outside the skill before invoking it. Avoid reused or mainnet keys; a safer version would use a wallet or signer flow with explicit user approval before broadcasting.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)

Intent-Code Divergence

Low
Confidence
94% confidence
Finding
The code transfers the token symbol 'USDC' but returns a success message claiming it transferred 'USD1'. This discrepancy can mislead users about what asset moved, which is dangerous in a financial transfer workflow because users may approve or reconcile the wrong asset and fail to detect unauthorized or erroneous transfers promptly.

Missing User Warnings

High
Confidence
97% confidence
Finding
This skill performs a live blockchain asset transfer immediately after receiving a private key, amount, destination address, and chain, with no explicit confirmation, preview, or risk disclosure. In an agent skill context, that makes accidental, coerced, or prompt-manipulated transfers much more likely, and blockchain transactions are generally irreversible once submitted.

Missing User Warnings

High
Confidence
98% confidence
Finding
The skill accepts a raw private key as normal input and directly uses it to authorize an external token transfer without any warning about secure handling, storage, or exposure risk. In an agent environment, passing private keys through skill inputs is especially dangerous because secrets may be logged, retained, inspected by intermediaries, or reused for unauthorized transfers.

Unpinned Dependencies

Low
Category
Supply Chain
Content
"license": "ISC",
  "type": "commonjs",
  "dependencies": {
    "@wormhole-foundation/sdk": "^4.9.1",
    "@wormhole-foundation/sdk-base": "^4.9.1"
  }
}
Confidence
94% confidence
Finding
"@wormhole-foundation/sdk": "^4.9.1"

Unpinned Dependencies

Low
Category
Supply Chain
Content
"type": "commonjs",
  "dependencies": {
    "@wormhole-foundation/sdk": "^4.9.1",
    "@wormhole-foundation/sdk-base": "^4.9.1"
  }
}
Confidence
94% confidence
Finding
"@wormhole-foundation/sdk-base": "^4.9.1"

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.