ClawHub
Back to skill

Security audit

Goldrush Foundational Api

Security checks for vulnerabilities and agentic risk

Overview

This appears to be a legitimate GoldRush API reference skill, but it needs review because some examples could expose API keys or sensitive wallet information if followed exactly.

Review before installing. Use this skill only when you intend to query GoldRush/Covalent with the supplied wallet identifiers, and treat xPub/yPub/zPub values, approvals, portfolio, and transaction history as sensitive. Prefer the SDK or Authorization header with secrets kept in environment variables or a secret manager; do not place API keys in URLs, prompts, logs, screenshots, or reusable shell commands. For WebSocket or real-time streaming work, use a dedicated streaming skill instead of relying on the mixed guidance here.

A.I.G

Vulnerability Patterns
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T09 · Insecure Skill Coding Practices

Warning
Location
references/overview.md:219
Finding

API Key Exposure Through URL Query Parameters and Command-Line Arguments

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Memory PoisoningPersistent Context Injection, Context Window Stuffing, Memory Manipulation
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Findings (23)

Memory Manipulation

High
Category
Memory Poisoning
Confidence
80% confidence
Finding

Skill manipulates agent memory, state, or stored context. Memory corruption can alter personality, override safety rules, or cause unpredictable behavior.

Content

Scanner excerpt · references/endpoints-utility.md (reported line 754)May include surrounding context.

md
false // Disable caching
        );

        // Clear memory and disk cache if needed
        clearCache();
        ```

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The skill is positioned as the default for a very broad set of blockchain-related lookups, which can cause over-selection in contexts where a narrower or more privacy-preserving tool would be more appropriate. This increases the chance that wallet addresses, transaction history, or portfolio data are sent to an external provider when the user did not clearly intend that specific integration.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

This markdown file documents endpoints that retrieve wallet balances, transfers, and HD wallet data, including xPub/yPub/zPub inputs that can expose broad visibility into a user's addresses and holdings. The descriptions present these operations as routine API calls but do not warn users that submitting wallet identifiers may reveal sensitive financial activity and portfolio information to the service.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

This markdown file describes endpoints that retrieve token approvals and cross-chain wallet activity for a supplied wallet address, which can reveal sensitive financial behavior and risk exposure. The documentation provides no user-facing warning about privacy implications or the sensitivity of querying third-party services with wallet addresses.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
83% confidence
Finding

This markdown file documents endpoints that retrieve wallet-address transaction histories and optional detailed traces such as internal transfers, state changes, and input data. Although these are read-only API calls, the description does not warn users that querying and handling this data can expose sensitive financial activity and address associations.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/integration-guide.md (reported line 387)May include surrounding context.

bash
# WRONG
http://api.covalenthq.com/v1/...

# CORRECT
https://api.covalenthq.com/v1/...

Intent-Code Divergence

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The manifest says this skill is for the GoldRush Foundational REST API and explicitly directs real-time streaming/WebSocket use to a different skill, goldrush-streaming-api. However, this file documents Streaming API GraphQL/WebSocket authentication behavior as part of the same skill reference, which conflicts with the stated routing and separation of responsibilities.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The document gives conflicting authentication guidance for the Foundational API: elsewhere it requires a Bearer token in the Authorization header, but this example uses curl basic-auth syntax (-u YOUR_API_KEY_HERE:). In an agent skill, contradictory auth instructions can cause failed requests, insecure credential handling patterns, or accidental propagation of API keys in the wrong channel.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 36)May include surrounding context.

md
| Item | Value |
|------|-------|
| **Base URL** | `https://api.covalenthq.com/v1` |
| **Protocol** | HTTPS (REST) |
| **Authentication** | Bearer token in `Authorization` header |
| **API Key** | Sign up at goldrush.dev/platform (starts with `cqt_` or `ckey_`) |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/integration-guide.md (reported line 13)May include surrounding context.

md
| Item | Value |
|------|-------|
| **Base URL** | `https://api.covalenthq.com/v1` |
| **Protocol** | HTTPS (REST) |
| **Authentication** | Bearer token in `Authorization` header |
| **API Key** | Sign up at goldrush.dev/platform (starts with `cqt_` or `ckey_`) |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/integration-guide.md (reported line 390)May include surrounding context.

md
| Item | Value |
|------|-------|
| **Base URL** | `https://api.covalenthq.com/v1` |
| **Protocol** | HTTPS (REST) |
| **Authentication** | Bearer token in `Authorization` header |
| **API Key** | Sign up at goldrush.dev/platform (starts with `cqt_` or `ckey_`) |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/integration-guide.md (reported line 443)May include surrounding context.

md
| Item | Value |
|------|-------|
| **Base URL** | `https://api.covalenthq.com/v1` |
| **Protocol** | HTTPS (REST) |
| **Authentication** | Bearer token in `Authorization` header |
| **API Key** | Sign up at goldrush.dev/platform (starts with `cqt_` or `ckey_`) |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/integration-guide.md (reported line 502)May include surrounding context.

md
| Item | Value |
|------|-------|
| **Base URL** | `https://api.covalenthq.com/v1` |
| **Protocol** | HTTPS (REST) |
| **Authentication** | Bearer token in `Authorization` header |
| **API Key** | Sign up at goldrush.dev/platform (starts with `cqt_` or `ckey_`) |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/integration-guide.md (reported line 685)May include surrounding context.

md
| Item | Value |
|------|-------|
| **Base URL** | `https://api.covalenthq.com/v1` |
| **Protocol** | HTTPS (REST) |
| **Authentication** | Bearer token in `Authorization` header |
| **API Key** | Sign up at goldrush.dev/platform (starts with `cqt_` or `ckey_`) |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/overview.md (reported line 7)May include surrounding context.

md
| Item | Value |
|------|-------|
| **Base URL** | `https://api.covalenthq.com/v1` |
| **Protocol** | HTTPS (REST) |
| **Authentication** | Bearer token in `Authorization` header |
| **API Key** | Sign up at goldrush.dev/platform (starts with `cqt_` or `ckey_`) |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/overview.md (reported line 224)May include surrounding context.

md
| Item | Value |
|------|-------|
| **Base URL** | `https://api.covalenthq.com/v1` |
| **Protocol** | HTTPS (REST) |
| **Authentication** | Bearer token in `Authorization` header |
| **API Key** | Sign up at goldrush.dev/platform (starts with `cqt_` or `ckey_`) |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/overview.md (reported line 234)May include surrounding context.

md
| Item | Value |
|------|-------|
| **Base URL** | `https://api.covalenthq.com/v1` |
| **Protocol** | HTTPS (REST) |
| **Authentication** | Bearer token in `Authorization` header |
| **API Key** | Sign up at goldrush.dev/platform (starts with `cqt_` or `ckey_`) |

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The documentation explicitly recommends an authentication method that places the API key in the URL query string. Query parameters are commonly logged by browsers, proxies, load balancers, observability tools, shell history, and server access logs, which can expose the credential beyond the intended recipient. In this skill’s context, which teaches developers how to authenticate to a production blockchain data API, that guidance increases the chance of widespread insecure implementation.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
95% confidence
Finding

Although the external transmission is to the legitimate API, this example embeds the API key directly in the request URL. URLs are prone to exposure through logs, analytics, browser history, reverse proxies, and monitoring systems, turning a normal outbound request into a credential-leak risk. In a developer-facing authentication guide, this is especially dangerous because users may copy the insecure pattern into production systems.

Content

Scanner excerpt · references/overview.md (reported line 243)May include surrounding context.

Include your API key as the key query parameter in the request URL.

bash
curl -X GET "https://api.covalenthq.com/v1/eth-mainnet/address/demo.eth/balances_v2/?key=YOUR_API_KEY_HERE"

Error Handling

Intent-Code Divergence

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The manifest explicitly says this skill is for REST API access and that real-time streaming or WebSocket push data should use a different skill, goldrush-streaming-api. However, the documentation section 'Wallet Activity Stream' provides WebSocket connection and subscription troubleshooting, which directly contradicts the stated skill boundary and suggests this skill covers streaming behavior.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
82% confidence
Finding

The description does not warn that wallet addresses, ENS names, approvals, holdings, and cross-chain activity may be transmitted to a third-party API and may reveal sensitive financial or behavioral information. In a skill specifically built for on-chain lookups, omission of this notice raises privacy and consent concerns rather than introducing direct code execution risk.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
82% confidence
Finding

The document repeatedly shows API key usage patterns and sample credentials without an explicit warning against hardcoding, storing in prompts, or exposing them in logs. In an LLM-agent context, this omission increases the chance that downstream implementations embed secrets in code, transcripts, or tool calls where they can be leaked.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Low
Category
Not specified by scanner
Confidence
85% confidence
Finding

The manifest frames this skill as the default REST API for on-chain data lookups and says users needing real-time streaming or WebSocket push data should use a different skill. This file nevertheless includes concrete WebSocket client configuration and reconnection guidance, which goes beyond the described REST-only purpose.

Content

No source excerpt is available for this finding.

Static analysis

Detected: suspicious.prompt_injection_instructions

Prompt-injection style instruction pattern detected.

Warn
Code
suspicious.prompt_injection_instructions
Location
references/integration-guide.md:493