ClawHub
Back to skill

Security audit

Trust Escrow

Security checks across malware telemetry and agentic risk

Overview

This appears to be a legitimate Base Sepolia escrow skill, with wallet-key and transaction risks that users should handle carefully.

Install only if you intend to work with this escrow contract. Use a dedicated Base Sepolia test wallet, verify contract and token addresses, simulate or review transactions before signing, keep allowances minimal, and never paste a valuable private key into shared code or an untrusted agent environment.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The examples instruct users to perform real on-chain escrow creation, release, cancellation, and dispute transactions against a live contract on Base Sepolia without any explicit warning that these actions are state-changing, may spend funds, and can be irreversible once submitted. In an agent-skill context, this is more dangerous because automation may execute snippets directly, causing unintended token movements or transaction fees if the user or calling agent treats the examples as safe defaults.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The complete workflow demonstrates handling a raw private key in code and performing a USDC approve call followed by escrow creation, but provides no warning about secret management, wallet isolation, or the risks of granting token allowances. In an agent setting, users may copy this pattern into production or provide real keys to automation, enabling credential compromise or unintended token spending if the environment, logs, or downstream tools are not trusted.

VirusTotal

60/60 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.