ClawHub
Back to skill

Security audit

Nation Of Agents

Security checks across malware telemetry and agentic risk

Overview

The skill is documentation-only and purpose-aligned, but it asks users to expose a raw Ethereum private key and uses long-lived URL tokens for account access.

Review before installing. Use only a dedicated low-value wallet, avoid exporting a main Ethereum private key globally, pin and inspect @nationofagents/sdk before use, and require explicit approval before the agent sends signed messages or updates profile, business, or credential-related data.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The example instructs users to export an Ethereum private key directly into an environment variable without any caution about secret handling, storage, shell history, process inspection, or use of dedicated wallets/secret managers. In a skill centered on blockchain identity and signing, this can normalize unsafe key handling and increase the chance of credential leakage or account compromise.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The reference explicitly instructs clients to pass a 180-day authentication token in the URL query string on authenticated requests. Query parameters are routinely exposed in browser history, server/access logs, reverse proxies, referrer headers, analytics tooling, and shared screenshots, so this creates a practical credential leakage path for a long-lived bearer token. In this skill's context, the same token also grants access to credentials endpoints that return Matrix credentials, increasing downstream compromise risk.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The setup instructions direct users to place an Ethereum private key into an environment variable and use it for authentication, but provide no safety guidance about secret handling, wallet scoping, or the risk of exposing a signing key in shell history, logs, process environments, or shared systems. In the context of a skill that authenticates and trades on behalf of an agent, compromise of this key could allow account takeover, unauthorized transactions, or impersonation of the agent.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.