ClawHub
Back to skill

Security audit

Nano (XNO)

Security checks across malware telemetry and agentic risk

Overview

This Nano wallet skill is mostly coherent, but it needs review because broad trigger phrases could activate cryptocurrency wallet behavior for unrelated wallet, balance, invoice, refund, or account requests.

Install only if you intend this agent to operate configured Nano/XNO wallets. Review the broad triggers and consider narrowing them before use. Never paste a private key, seed, or mnemonic into the agent; treat CLI private-key signing examples as local-only commands. Confirm every destination, amount, refund address, and send-limit change before allowing transactions.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
96% confidence
Finding
The trigger list includes several generic phrases such as "wallet", "wallets", "balance", "pending", "qr code", "invoice", and "refund" that are likely to match unrelated user requests outside the Nano/XNO domain. In this skill, accidental activation is more dangerous than usual because the skill is authorized to inspect assistant-controlled wallets and potentially initiate cryptocurrency payment workflows, increasing the chance of unintended financial actions or misleading wallet-related responses.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The documentation explicitly instructs users to pass a private key via a command-line option, which can expose the key through shell history, process listings, audit logs, and terminal recording. In a cryptocurrency wallet context, disclosure of a private key can directly enable theft of funds and compromise of any accounts controlled by that key.

Shadow Command Trigger

Medium
Category
Trigger Abuse
Confidence
85% confidence
Finding
The trigger phrase "open account" can collide with common assistant or platform semantics around opening resources, account setup, or built-in "open" commands, causing this crypto wallet skill to activate unexpectedly. Because the skill governs wallet inspection and transaction-oriented behaviors, a shadow trigger can reroute benign requests into a financial context and create confusion or unsafe follow-on actions.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.