T08 · Insecure Dependencies
Error
- Location
SKILL.md:4- Finding
Unpinned Third-Party Executable Installation
- Content
View full analysis
- Remediation
View remediation
Security audit
Taiko Native Bridge
Security checks for vulnerabilities and agentic risk
Overview
This bridge skill is coherent, but it asks agents to install and run a mutable third-party crypto bridge tool with raw private-key access and no clear per-transaction approval gate.
Review carefully before installing. Use only a pinned and verified bridge CLI build, avoid giving an agent or CLI a raw private key, prefer a hardware wallet or external signer, use a low-value dedicated wallet, and require explicit confirmation of chain, token, amount, recipient, and fees before every transaction.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)
T09 · Insecure Skill Coding Practices
Error
- Location
SKILL.md:28- Finding
Wallet Private Key Exposed Through Process Arguments and Agent Conversation
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
This skill provides ready-to-run bridge commands that can move ETH and tokens using a supplied private key, but it does not require an explicit user confirmation or prominently warn that these are irreversible on-chain asset transfers. In an agent setting, that omission is dangerous because an LLM may execute the provided workflows directly once environment variables are present, causing unintended loss or transfer of user funds across chains.
- Content