Cocod

PassAudited by ClawScan on May 10, 2026.

Overview

This is a coherent Cashu/Bitcoin wallet helper, but it can spend real funds and relies on an external cocod CLI and background daemon.

Only install this if you intend to use the cocod Cashu wallet CLI. Verify the CLI package and version, keep ~/.cocod and any passphrase or mnemonic private, preview payment requests when possible, and require explicit confirmation before any command that spends funds.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI03: Identity and Privilege Abuse

What this means

If used incorrectly, the agent could help spend funds or expose wallet-sensitive information; Bitcoin/Lightning-style payments may not be reversible.

Why it was flagged

The skill handles wallet authority, spend actions, and sensitive wallet material. This is expected for a Cashu/Lightning wallet, and the artifact includes explicit safety instructions.

Skill content

Always ask for explicit user permission before running any command/flow that can spend wallet funds... Treat `~/.cocod` as sensitive... including config, mnemonic material, wallet state

Recommendation

Approve each spend explicitly, verify payment amounts and invoices before confirming, and do not reveal mnemonics, passphrases, or raw ~/.cocod contents unless you intentionally choose a safe subset.

NoteMedium Confidence

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Your trust in this skill also depends on the cocod CLI package you install and run.

Why it was flagged

The skill relies on an external globally installed CLI package. That is central to the stated purpose, but the reviewed artifact does not include the CLI code itself.

Skill content

bun install -g cocod

Recommendation

Install only from a trusted package source, verify the installed version matches the documented 0.0.15 requirement, and avoid using the wallet with significant funds until you trust the CLI.

NoteHigh Confidence

ASI10: Rogue Agents

What this means

A local wallet daemon may continue running after a task and maintain access to wallet state until stopped or locked.

Why it was flagged

The skill documents a background daemon that can run beyond a single command. This is disclosed and normal for some wallet tooling, but it is still persistence users should notice.

Skill content

# Start the background daemon (started automatically when not running when required)
cocod daemon

# Stop the daemon
cocod stop

Recommendation

Use `cocod status` to check daemon state and `cocod stop` when you no longer want the wallet daemon running.