Warden Messari Agent

PassAudited by ClawScan on May 10, 2026.

Overview

This is an instruction-only guide for querying an external crypto research agent with disclosed per-request USDC payments; no hidden code is present, but users should verify the service and approve payments carefully.

Before using this skill, verify the Warden/Messari URL and on-chain identity details, avoid sending confidential prompts, and approve x402 payments only after checking the amount, network, and recipient. Because the provided SKILL.md was partially truncated, review the full skill text if available.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI03: Identity and Privilege Abuse

What this means

Using the skill may cause a USDC payment for each query if the user or agent signs the x402 payment payload.

Why it was flagged

The skill describes signing a payment authorization that can spend USDC for each request. This is purpose-aligned and disclosed, but it uses real wallet/payment authority.

Skill content

Payment: x402 USDC micropayments ($0.25 per request on Base mainnet) ... Create a signed EIP-3009 authorization (gasless; the facilitator submits the on-chain transfer)

Recommendation

Verify the amount, network, recipient, and payment header before signing; consider using a dedicated wallet or spending limits.

Note

ASI07: Insecure Inter-Agent Communication

What this means

Questions sent through this skill may be visible to the external Messari/Warden service.

Why it was flagged

The skill routes user questions to an external A2A agent endpoint. This is the core purpose, but user-provided query text leaves the local environment.

Skill content

Base URL: `https://messari.agents.wardenprotocol.org` ... All queries use the A2A JSON-RPC 2.0 protocol on `POST /`.

Recommendation

Do not send secrets, private wallet information, or confidential business data in research prompts; verify the endpoint before use.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Users have less registry-provided information to confirm the publisher and official endpoint before making payments.

Why it was flagged

The registry metadata does not provide a source repository or homepage, which limits independent provenance checks for a skill that instructs users to interact with a paid external crypto service.

Skill content

Source: unknown; Homepage: none

Recommendation

Independently verify the Warden/Messari endpoint and any on-chain registration information before signing payments.