Gougoubi Claim All Rewards

• Outcome: Review
• Latest audit: May 29, 2026 at 9:27 PM UTC
• Version:
  1.0.2

Overview

This skill is openly for claiming crypto rewards, but it can direct live on-chain transactions through scripts that are not included or fully scoped in the package.

Review before installing. Use it only if you know which Gougoubi scripts will run and which wallet will sign. Require a dry run first, then approve the exact network, addresses, signer, gas estimate, and transaction details before any claim is submitted.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: This markdown file describes a one-click claim workflow, but it does not explicitly warn users that the action will broadcast on-chain claim transactions that can affect wallet state and may have irreversible effects once submitted. For markdown skills, user-facing warnings are expected when behavior can affect user data, privacy, or system integrity.

VirusTotal

66/66 vendors flagged this skill as clean.