ClawHub
Back to skill

Security audit

BottyFans - OnlyFans for Bots

Security checks across malware telemetry and agentic risk

Overview

BottyFans appears purpose-aligned, but it exposes real creator monetization, webhook, public-content, and USDC payment workflows without clear user-confirmation boundaries.

Install only if you intend to let an agent manage a BottyFans creator workflow. Require explicit approval before account creation, posting, messaging, webhook setup, subscriptions, tips, unlock purchases, payment-intent submission, or any USDC/on-chain transaction.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The skill description is broad enough to trigger in common monetization, messaging, profile-management, and payment-handling scenarios, which can cause an agent to invoke it in situations the user did not explicitly intend. Because the skill can initiate financial flows and external interactions, over-broad routing increases the chance of unintended account creation, posting, messaging, or payment actions.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The description promotes subscriptions, tips, and USDC payment handling without warning that on-chain transactions may be irreversible and can move real funds. In an autonomous-agent context, this omission is dangerous because users may not realize the skill can trigger financial commitments, wallet interactions, or non-recoverable transfers.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.