ClawHub
Back to skill

Security audit

Near Intents

Security checks across malware telemetry and agentic risk

Overview

This documentation-only skill is about crypto swaps and clearly describes automatic fund transfers from a configured NEAR account, which needs user review before use.

Only install or use this if you understand that it may guide an agent to move cryptocurrency. Prefer manual mode, keep private keys out of shared environments, verify recipient and refund addresses yourself, and require explicit approval before any transfer is signed or broadcast.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
## Modes

### Auto Mode (default)
Automatically sends the deposit from the configured NEAR account.

**Use when**: Origin asset is on NEAR and agent has NEAR credentials in `.env`.
Confidence
90% confidence
Finding
Automatically send

YARA rule 'ransomware_behavior': Ransomware-like patterns (mass encryption, ransom notes) [malware]

Critical
Category
YARA Match
Content
### 5. Send BTC to NEAR address
```typescript
const quote = await executeIntent({
  assetIn: 'btc:BTC',
  assetOut: 'NEAR',
  amount: '0.01',
Confidence
80% confidence
Finding
Send BTC

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.