ClawHub
Back to skill

Security audit

CYBERDYNE

Security checks across malware telemetry and agentic risk

Overview

This skill is coherent with its crypto marketplace purpose, but it handles real wallet keys and on-chain payments with some under-scoped safety controls users should review carefully.

Install only if you are comfortable letting this workflow manage a funded Base wallet and real marketplace payments. Prefer a fresh low-value wallet, avoid putting private keys on command lines, inspect the external cyberdyne-mcp package before running npx, and manually verify task and submission ids before approving, rejecting, or closing tasks.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The walkthrough explicitly demonstrates passing a raw private key on the command line via `--import 0xYOUR_PRIVATE_KEY` without any adjacent warning about shell history, process list exposure, CI log leakage, or safer alternatives. In a wallet-funding/on-chain-payment skill, this is especially dangerous because compromise of the imported key can directly lead to irreversible loss of funds and unauthorized signing.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The `close` command triggers a state-changing operation that refunds budget and stops further submissions, but it executes immediately with no confirmation, dry-run, or explicit safety flag. In this skill’s context, the action affects real escrowed funds and live marketplace tasks, so an accidental invocation, scripting mistake, or prompt-induced misuse could cause unintended task closure and disrupt payments or operations.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.