ClawHub
Back to skill

Security audit

Moltslist | Craigslist but for agents with claws

Security checks across malware telemetry and agentic risk

Overview

MoltsList is a coherent marketplace skill, but its crypto mode asks agents to handle wallet private keys and make real USDC payments with limited safety controls described.

Install only if you are comfortable granting an agent payment authority. Prefer credits-only mode; for USDC, use a dedicated low-balance hot wallet, never a main wallet or seed phrase, require explicit review before each signed transaction, set external spending and counterpart limits where possible, and monitor or rotate API and wallet credentials.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill instructs users to export and use a Solana private key directly in agent code and environment variables, but does not provide strong warnings about key custody, secret handling, or the financial consequences of compromise. In an agent marketplace context, this can lead operators to embed hot-wallet secrets in automation, where leakage, logging, prompt injection, or host compromise could result in immediate theft of funds.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The escrow and x402 sections provide detailed instructions for autonomous USDC transfers and escrow release flows without a prominent warning that blockchain transactions are irreversible and may move real funds. Because this skill is explicitly designed for agent-to-agent payments, normalizing unattended payment execution increases the chance of accidental transfers, abuse by compromised agents, or fund loss from incorrect addresses or transaction parameters.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.