Openclaw Fomo3d

• Outcome: Review
• Latest audit: May 29, 2026 · 9:23 PM UTC
• Version: 1.3.1

Overview

This skill is a real BNB Chain game/trading CLI, but it handles live wallet keys and can make high-impact transactions with weak safeguards.

Review before installing. Use only a dedicated low-balance wallet, prefer testnet first, avoid storing valuable private keys in this repo's config.json, revoke token allowances after use, and treat buy/sell/bet/deposit/propose/dispute commands as irreversible live transactions that may lose funds.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (12)

Missing User Warnings

Medium

• Confidence: 88% confidence
• Finding: This skill drives irreversible on-chain transactions involving token purchases, sales, betting, and deposits, yet the setup/run section lacks a prominent up-front warning about real-fund loss, transaction finality, approvals, and smart-contract risk. In a blockchain wallet-management context, insufficient warning increases the chance that users will authorize harmful or unintended transfers.

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The documentation instructs users to provide a private key through setup or environment variables without an explicit warning never to paste secrets into untrusted prompts, logs, shells, chat, or plaintext files. Because this is a wallet-managing skill, weak secret-handling guidance directly raises the risk of credential theft and total wallet compromise.

Missing User Warnings

Medium

• Confidence: 96% confidence
• Finding: The command submits an irreversible on-chain purchase immediately after parsing CLI input, with no confirmation prompt, no preview of recipient/router/token details, and no slippage protection because minOutputAmount is set to 0. In a wallet-managing trading skill, this increases the chance of accidental loss from user mistakes, front-running, or unexpectedly bad execution.

Missing User Warnings

Medium

• Confidence: 98% confidence
• Finding: The PancakeSwap path executes a live swap without confirmation and explicitly uses amountOutMin=0, allowing the trade to proceed at any output amount. In the context of a BNB-chain trading/gaming wallet skill, this is particularly dangerous because users are induced to trade volatile or thin-liquidity assets, making sandwich attacks and severe slippage losses much more likely.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: This command automatically performs two state-changing actions with financial consequences: it may first approve token spending for the bond and then immediately submits the dispute transaction. In a wallet-management and betting skill operating on BNB Chain, this is dangerous because a mistyped market ID, misunderstood bond size, or malicious prompting could cause unintended token approvals and locked/staked funds without any explicit user confirmation step.

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: This command loads a private key and immediately uses it to submit an on-chain state-changing transaction, but provides no explicit user-facing warning that secret material is being accessed and that funds/authority may be used. In a wallet-managing blockchain skill, that omission increases the risk of users triggering sensitive actions without understanding that a live signing key is involved, especially for high-stakes actions like market finalization.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: This command directly loads the user's private key and prepares a signing-capable wallet client with no user-facing disclosure, confirmation, or safety interstitial. In a blockchain gaming/trading skill that can move funds and place on-chain bets, silent key use increases the chance of unintended or socially engineered transactions being signed, especially when invoked through higher-level agent workflows.

Missing User Warnings

Medium

• Confidence: 97% confidence
• Finding: The command automatically calls ensureAllowance before proposing an outcome, which can trigger an ERC-20 approval transaction without explicit confirmation. In this skill context, automatic approval is especially risky because token approvals can outlive the immediate action and, if overbroad or granted to a compromised/misconfigured contract, may enable unintended token spending beyond the user's expectation.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The setup flow interactively collects a raw private key and persists it via writeConfig(config), which strongly implies storage in a local config file without encryption, secure keychain use, or even a warning to the user. In a blockchain wallet context, compromise of that file immediately enables theft of funds, unauthorized bets/trades, and irreversible on-chain transactions, making this more dangerous than generic secret storage because the credential directly controls assets.

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The code persists merged configuration directly to config.json, and the Config type includes a privateKey field. In a wallet-management skill for BNB Chain gaming, storing a raw private key in a plaintext project file materially increases the risk of credential theft through local compromise, accidental git commits, backups, or multi-user environments.

Missing User Warnings

Medium

• Confidence: 96% confidence
• Finding: The code unconditionally approves `maxUint256` when the current allowance is below the required amount, granting the spender unlimited access to the user's tokens instead of only the amount needed. In a blockchain gaming/trading skill that interacts with external contracts and user wallets, this materially increases blast radius: if the spender contract is buggy, upgradeable, compromised, or if the user later forgets the approval, all wallet holdings of that token may be drained without further consent.

Autonomous Decision Making

Medium

• Category: Excessive Agency

Content

faucet                        Claim 10000 test FOMO tokens

GAME ACTIONS:
  purchase --shares <n>         Buy shares (auto-approves token)
  exit                          Exit game, claim dividends
  settle                        Settle after round ends + claim prize
  end-round                     End expired round

• Confidence: 87% confidence
• Finding: auto-approve

VirusTotal

64/64 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.