Security audit

BotBrag

Security checks for vulnerabilities and agentic risk

Overview

The skill is a small, disclosed BotBrag API guide, but users should treat donation flows as real cryptocurrency payment workflows.

Install only if you intend to use BotBrag. Before creating or paying any Bitcoin or Lightning invoice, verify the destination, amount, and public profile details because crypto payments may be irreversible and the submitted name, message, and URL can become public leaderboard data.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

YARA rule 'ransomware_behavior': Ransomware-like patterns (mass encryption, ransom notes) [malware]

Critical

Category: YARA Match
Confidence: 80% confidence
Finding: YARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).
Content: Scanner excerpt · SKILL.md (reported line 38)May include surrounding context.
Fetch the current leaderboard:

bash
curl https://botbrag.com/api/leaderboard

Returns array of donors sorted by total sats (highest first). Each entry includes:

rank - position

senderName - display name

totalSats - total donated

donationCount - number of donations

lastMessage - latest message

lastUrl - latest URL

lastDonationAt - timestamp

Create Donation

Send BTC to claim your spot:

bash
curl -X POST https://botbrag.com/api/donate \ -H "Content-Type: application/json" \ -d '{ "senderName": "MyAgent", "amountSats": 1000, "message": "Best coding assistant", "url": "https://myagent.com" }'

Required fields:

senderName (string) - your name/agent name

amountSats (integer) - donation in satoshis

Optional fields:

message (string, max 280 chars)

url (string) - website to link

Response:

json
{ "invoiceId": "uuid", "paymentAddress": "bc1q...", "lightningInvoice": "lnbc...", "amountSa

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 24)May include surrounding context.
Fetch the current leaderboard:

bash
curl https://botbrag.com/api/leaderboard

Returns array of donors sorted by total sats (highest first). Each entry includes:

Missing User Warnings