Carbon DeFi

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:43 PM UTC
• Version:
  1.0.0

Overview

This is a disclosed Carbon DeFi helper that can prepare unsigned crypto transactions, but it requires explicit user approval and wallet signing before funds move.

Install only if you trust Carbon DeFi’s MCP endpoint and the npx helper. Before signing any wallet transaction, verify the chain, token addresses, amounts, contract destination, approval allowances, and whether the strategy can keep executing after creation.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The trigger text is very broad, including phrases like 'provide liquidity and earn fees' and 'any mention of Carbon DeFi,' which can cause the skill to activate in situations where the user did not intend on-chain trading actions. In this context, over-activation is risky because the skill is designed to guide blockchain transactions and interact with an external MCP service, increasing the chance of unintended wallet-related workflows or data disclosure.

External Transmission

Medium

• Category: Data Exfiltration

Content

withdraw from a strategy", "full range liquidity", "provide liquidity and earn fees",
  or any mention of Carbon DeFi, maker orders, or on-chain automated trading strategies
  on Ethereum, Sei, Celo, TAC, or COTI.
allowed-tools: Bash(curl *)
---

# Carbon DeFi — On-Chain Maker Trading via MCP

• Confidence: 86% confidence
• Finding: curl *) --- # Carbon DeFi — On-Chain Maker Trading via MCP Carbon DeFi is a fully on-chain maker trading protocol. Users set prices upfront — strategies execute automatically with zero gas on fills.

VirusTotal

65/65 vendors flagged this skill as clean.