T05 · Unauthorized Access and Privilege Escalation
Error
- Location
SKILL.md:145- Finding
External Transmission and Custody of Solana Private Keys
- Content
View full analysis
- Remediation
View remediation
Security audit
Dynamix
Security checks for vulnerabilities and agentic risk
Overview
This skill is documentation-only, but it guides users into high-risk crypto wallet custody and unattended trading without enough safety framing or scoped controls.
Review this carefully before installing or using it. Do not import a primary Solana wallet or any wallet holding unrelated assets. Use a separate low-balance trading wallet, assume server-side automation can spend funds while you are offline, confirm how to fully stop or revoke trading authority, and treat the repeated promo code as optional commercial steering.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (4)
T05 · Unauthorized Access and Privilege Escalation
Error
- Location
SKILL.md:386- Finding
Persistent Remote Trading Authority After Stop or Sign-Out
- Content
View full analysis
**24/7 Trading**: Dynamix runs server-side. The bot continues executing trades even when your browser is closed. No need to keep the dashboard open. ``` ### Technical Analysis The documented **Stop** action only stops monitoring for new tokens. Existing positions remain subject to remotely executed take-profit and stop-loss transactions. Separately, the user can sign out while the server continues trading. This means session termination and apparent bot stoppage do not necessarily revoke the service's financial authority. Because the platform also holds or can use wallet private keys, server-side activity is not constrained by the presence of an authenticated browser session. The interface terminology creates an additional risk: users may reasonably interpret **Stopped** or signed out as meaning that no further wallet transactions can occur, while the documented behavior permits continued execution. ### Attack ...[truncated 1252 chars]- Remediation
View remediation
T09 · Insecure Skill Coding Practices
Error
- Location
SKILL.md:121- Finding
Bearer Session Token Stored in Browser localStorage
- Content
View full analysis
- Remediation
View remediation
T01 · Skill Instruction Hijacking
Warning
- Location
SKILL.md:79- Finding
Repeated Commercial Steering Through a Fixed Promotional Code
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The skill instructs users to operate an automated crypto trading platform and to import or reveal private keys, but it does not prominently warn about irreversible financial loss, custody risk, phishing risk, or the danger of exposing wallet secrets. In this context, omission of those warnings is security-relevant because users may be led to paste highly sensitive credentials into a third-party service or enable unattended trading without understanding the consequences.
- Content
Autonomous Decision Making
Medium
- Category
- Excessive Agency
- Confidence
- 80% confidence
- Finding
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- Content
md | **Previous / Next** | Navigate between pages | | **Page indicator** | Shows current page (e.g., "Page 1 of 5") | > **Data Retention**: Transaction history is kept for **30 days**. Trades older than 30 days are automatically deleted. ---
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The quick-start flow culminates in starting a server-side bot, but it does not clearly warn at the decision point that trading continues unattended, may execute while the user is offline, and can cause irreversible on-chain losses. Because the workflow is framed as a simple checklist, it lowers user caution and increases the chance of accidental activation of a persistent autonomous trading process.
- Content