ClawHub
Back to skill

Security audit

Giveaway Skills

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent BSC contract-call guide, but users should treat its write examples as real mainnet crypto transactions.

Before installing or using this skill, understand that write calls use a signer on BSC mainnet and can transfer real assets, incur gas and contract fees, require ERC20 approvals, and generally cannot be reversed once confirmed. Prefer read-only checks first and require explicit confirmation before any create, claim, withdraw, approve, or whitelist transaction.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The skill provides direct examples for invoking payable and state-changing contract methods that move real BNB/ERC20 assets, but it does not clearly warn that these are irreversible on-chain transactions with immediate financial consequences. In an agent-skill context, that omission increases the risk that a user or downstream automation executes a live transaction on BSC mainnet without understanding that funds will be transferred, fees deducted, and actions cannot be undone.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
97% confidence
Finding

The manifest sets language: en, which indicates a fixed language choice. Under SQP-3, forcing a specific language without user opt-in or a documented region/compliance justification is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.