ClawHub
Back to skill

Security audit

Boiling Point

Security checks for vulnerabilities and agentic risk

Overview

This skill is clear about using Token Layer for on-chain token launches and trades, but it can execute real blockchain transactions from third-party API responses without enough final safeguards.

Review this skill carefully before installing. Use a wallet with limited funds, prefer testnet or small amounts first, and require the agent to show and confirm every transaction's chain, destination, value, and calldata before broadcasting. Do not use a TOKENLAYER_API_KEY connected to a wallet holding assets you cannot afford to lose.

A.I.G

Vulnerability Patterns
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T09 · Insecure Skill Coding Practices

Error
Location
SKILL.md:82
Finding

Unvalidated Execution of Remotely Supplied Blockchain Transactions

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (15)

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 45)May include surrounding context.

md
## Quick Reference

- **Base URL**: `https://api.tokenlayer.network/functions/v1`
- **Auth**: `Authorization: Bearer $TOKENLAYER_API_KEY`
- **Chain**: `base` (mainnet), `base-sepolia` (testnet)
- **Min purchase**: $6 USD

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 112)May include surrounding context.

md
## Quick Reference

- **Base URL**: `https://api.tokenlayer.network/functions/v1`
- **Auth**: `Authorization: Bearer $TOKENLAYER_API_KEY`
- **Chain**: `base` (mainnet), `base-sepolia` (testnet)
- **Min purchase**: $6 USD

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 119)May include surrounding context.

md
## Quick Reference

- **Base URL**: `https://api.tokenlayer.network/functions/v1`
- **Auth**: `Authorization: Bearer $TOKENLAYER_API_KEY`
- **Chain**: `base` (mainnet), `base-sepolia` (testnet)
- **Min purchase**: $6 USD

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 130)May include surrounding context.

md
## Quick Reference

- **Base URL**: `https://api.tokenlayer.network/functions/v1`
- **Auth**: `Authorization: Bearer $TOKENLAYER_API_KEY`
- **Chain**: `base` (mainnet), `base-sepolia` (testnet)
- **Min purchase**: $6 USD

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 153)May include surrounding context.

md
## Quick Reference

- **Base URL**: `https://api.tokenlayer.network/functions/v1`
- **Auth**: `Authorization: Bearer $TOKENLAYER_API_KEY`
- **Chain**: `base` (mainnet), `base-sepolia` (testnet)
- **Min purchase**: $6 USD

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 168)May include surrounding context.

md
## Quick Reference

- **Base URL**: `https://api.tokenlayer.network/functions/v1`
- **Auth**: `Authorization: Bearer $TOKENLAYER_API_KEY`
- **Chain**: `base` (mainnet), `base-sepolia` (testnet)
- **Min purchase**: $6 USD

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 197)May include surrounding context.

md
## Quick Reference

- **Base URL**: `https://api.tokenlayer.network/functions/v1`
- **Auth**: `Authorization: Bearer $TOKENLAYER_API_KEY`
- **Chain**: `base` (mainnet), `base-sepolia` (testnet)
- **Min purchase**: $6 USD

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill explicitly instructs the agent to execute on-chain transactions returned by a third-party API, but it does not include a clear warning that blockchain transactions are irreversible and can permanently move or lose funds. In this context, the omission is more dangerous because the skill is specifically designed for token launches and trading, where users may authorize real asset transfers based on API-generated transaction payloads.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 119)May include surrounding context.

Enter Referral

bash
curl -s -X POST "https://api.tokenlayer.network/functions/v1/enter-referral-code" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $TOKENLAYER_API_KEY" \
  -d '{"referral_code": "OPENCLAW"}' | jq

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 130)May include surrounding context.

Image can be URL or base64 data URI:

bash
curl -s -X POST "https://api.tokenlayer.network/functions/v1/create-token-transaction" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $TOKENLAYER_API_KEY" \
  -d '{

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 153)May include surrounding context.

Quote Token (Get Price Before Trading)

bash
curl -s -X POST "https://api.tokenlayer.network/functions/v1/quote-token" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $TOKENLAYER_API_KEY" \
  -d '{

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 168)May include surrounding context.

Buy Token

bash
curl -s -X POST "https://api.tokenlayer.network/functions/v1/trade-token" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $TOKENLAYER_API_KEY" \
  -d '{

External Transmission

Medium
Category
Data Exfiltration
Confidence
97% confidence
Finding

This duplicate finding still highlights the most dangerous behavior in the file: submitting raw transaction parameters for execution on-chain. Because the skill normalizes taking to and data from external API responses and broadcasting them, any mistake, spoofed response, or unreviewed payload could irreversibly transfer funds or invoke harmful contract logic.

Content

Scanner excerpt · SKILL.md (reported line 183)May include surrounding context.

Send Transaction

bash
curl -s -X POST "https://api.tokenlayer.network/functions/v1/send-transaction" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $TOKENLAYER_API_KEY" \
  -d '{

External Transmission

Medium
Category
Data Exfiltration
Confidence
97% confidence
Finding

This duplicate finding still highlights the most dangerous behavior in the file: submitting raw transaction parameters for execution on-chain. Because the skill normalizes taking to and data from external API responses and broadcasting them, any mistake, spoofed response, or unreviewed payload could irreversibly transfer funds or invoke harmful contract logic.

Content

Scanner excerpt · SKILL.md (reported line 183)May include surrounding context.

Send Transaction

bash
curl -s -X POST "https://api.tokenlayer.network/functions/v1/send-transaction" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $TOKENLAYER_API_KEY" \
  -d '{

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 197)May include surrounding context.

Get Trending Tokens

bash
curl -s -X POST "https://api.tokenlayer.network/functions/v1/get-tokens-v2" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $TOKENLAYER_API_KEY" \
  -d '{

Static analysis

No suspicious patterns detected.