Cruzl Sentinel Core

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 7:31 AM UTC
• Version: 1.0.1

Overview

This skill gives rule-based Web3 activity and wallet-address suggestions, with some caution needed around anti-bot-style strategy advice and wallet privacy.

Install only if you want local, rule-based Web3 strategy suggestions. Do not use the anti-bot-pattern advice to evade protocol rules, farm rewards deceptively, or disguise automated activity; treat wallet-address analysis as financial metadata and provide addresses only when you intend them to be analyzed.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (4)

Ssd 4

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The 'Behavioral Guard System' recommends randomized timing, variable transaction sizes, multi-protocol usage, and non-batched execution specifically to avoid bot-like detection. In context, these are anti-detection tactics that can help automate or disguise manipulative onchain behavior, undermine platform enforcement, and facilitate abuse such as sybil farming, wash-like activity, or reward-gaming.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 85% confidence

Finding

The skill advertises wallet analysis and future onchain data integration without warning users about privacy, data handling, or the risks of behavioral profiling. This creates a transparency and consent gap, especially because wallet addresses can be linked to transaction history and used to infer user behavior across ecosystems.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 90% confidence

Finding

The example trigger 'paste wallet address → returns analysis' is broad enough that the skill could activate on ordinary wallet-address text without clear user intent. In an agent environment, this can cause unintended processing of sensitive financial identifiers and produce analysis or recommendations when the user did not explicitly request them.

Content

No source excerpt is available for this finding.

Unpinned Dependencies

Low

• Category: Supply Chain
• Confidence: 93% confidence

Finding

The dependency version uses a caret range (^3.3.2), which permits automatic installation of newer minor and patch releases. This can introduce supply-chain risk because a compromised or breaking upstream release could be pulled in without explicit review, reducing build reproducibility and weakening dependency integrity controls.

Content

Scanner excerpt · package.json (reported line 14)May include surrounding context.

json

"license": "ISC",
  "type": "commonjs",
  "dependencies": {
    "node-fetch": "^3.3.2"
  }
}

Static analysis

No suspicious patterns detected.