ClawHub
Back to skill

Security audit

Vincent - Agent Wallet

Security checks across malware telemetry and agentic risk

Overview

This is a real wallet integration, but it can give an agent control over funds, signatures, and betting without strong default human-confirmation guidance.

Install only if you intentionally want an agent-operated wallet. Before funding it, claim the wallet, set strict address/token/function allowlists, low spending limits, and manual approval requirements. Treat API keys and re-link tokens like wallet-control secrets, avoid storing them in shared workspaces, and do not use raw signing or arbitrary contract calls unless a human can independently review the exact payload and consequences.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
This section enables token transfers, swaps, and arbitrary contract calls, including a generic send-transaction endpoint, but does not require an explicit user confirmation step or warn that mistakes can cause irreversible on-chain loss. In an agent setting, ambiguous instructions, prompt injection, or parameter mix-ups could cause funds to be sent, swapped, or approved to attacker-controlled destinations before a human notices.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The raw signer functionality allows signing arbitrary hex messages and transaction hashes, but the documentation lacks a strong warning that signatures can authorize asset transfers, approvals, off-chain orders, or account takeovers depending on the protocol. Because the signer supports special protocols and self-broadcasted transaction hashes, an agent could be manipulated into producing a valid signature for attacker-chosen payloads without understanding the financial consequences.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The Polymarket section provides end-to-end instructions for funding, placing, selling, and canceling bets, but does not prominently warn that market orders, stale prices, settlement delays, and incorrect token selection can lead to immediate financial loss. In an autonomous-agent context, betting and order placement are especially sensitive because they combine real funds, market volatility, and potentially ambiguous natural-language instructions.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.