CryptoWallet - Multi-Chain Blockchain Wallet Manager

• Outcome: Review
• Latest audit: Jul 10, 2026 · 2:04 AM UTC
• Version: 1.0.0

Overview

This appears to be a real crypto wallet tool, but it needs Review because it can store private keys and broadcast irreversible transactions without strong confirmation safeguards, and some documentation overstates what it supports.

Install only if you intentionally want an agent-operated wallet on this machine. Use testnets or small balances first, verify every address, network, token contract, amount, ABI, and contract function before running write commands, avoid putting real private keys or passwords directly in shell commands, and prefer pinned dependencies plus trusted or self-controlled RPC endpoints.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Rogue Agent: Self-Modification, Session Persistence
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration

Findings (17)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 87% confidence
• Finding: The skill advertises shell execution and file read/write behavior but does not declare any permissions, which weakens security review and informed consent around a wallet-managing tool that can store keys locally and invoke scripts. In a cryptocurrency context, undeclared local filesystem and shell capabilities are especially risky because they can affect wallet files, transaction tooling, or user environment without clear sandbox expectations.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 95% confidence
• Finding: The documentation materially overstates capabilities, including Bitcoin support, NFT transfers, SPL token sending, and broader Solana smart-contract functionality that the skill does not actually implement. For a wallet skill handling irreversible financial actions, misleading claims can cause users or agents to invoke the wrong workflow, mis-handle assets, or assume safety/functionality that is absent, leading to loss of funds or unsafe operations.

Vague Triggers

Medium

• Confidence: 81% confidence
• Finding: The manifest uses very broad wallet and crypto keywords that can trigger the skill for generic requests without clear activation boundaries. Because this skill can create wallets, import keys, store secrets, and send transactions, overbroad invocation increases the chance of accidental activation for sensitive financial tasks and unintended handling of private key material.

Missing User Warnings

High

• Confidence: 93% confidence
• Finding: The documentation explains token transfers and contract write operations but does not prominently warn that blockchain transactions are irreversible and may cause permanent financial loss, especially when interacting with arbitrary contracts. In this context, omission of strong warnings is dangerous because the skill facilitates direct fund movement and signing actions where a small mistake can irreversibly transfer assets or approve malicious spending.

Missing User Warnings

Medium

• Confidence: 96% confidence
• Finding: The write path signs and immediately broadcasts blockchain transactions based on CLI input, with no explicit confirmation step, transaction preview, or user acknowledgment of irreversible effects. In a cryptocurrency wallet skill, this is especially dangerous because mistakes, prompt injection through higher-level agents, or maliciously supplied parameters can cause permanent fund loss, token approvals, or harmful contract interactions.

Missing User Warnings

Medium

• Confidence: 82% confidence
• Finding: The script signs and broadcasts an irreversible native-token transfer immediately after parsing arguments, with no final confirmation step showing destination, amount, and network. In a wallet-management skill handling real funds, this increases the risk of accidental transfers, prompt-injected misuse by upstream agents, or user error causing unrecoverable asset loss.

Missing User Warnings

Medium

• Confidence: 84% confidence
• Finding: ERC20 transfers are also signed and sent without a final user-facing confirmation, despite involving arbitrary token contracts and irreversible on-chain effects. In this skill context, that is more dangerous because the tool is specifically designed for automated wallet operations across many networks, making unintended or manipulated transfers more plausible.

Missing User Warnings

Medium

• Confidence: 81% confidence
• Finding: The Solana path submits a signed transfer immediately without an interactive confirmation or equivalent safety gate. Because SOL transfers are irreversible and this skill manages decrypted private keys locally, an accidental invocation or malicious upstream instruction could directly cause loss of funds.

Session Persistence

Medium

• Category: Rogue Agent

Content

---
name: cryptowallet
description: "Complete cryptocurrency wallet management for Web3, DeFi, and blockchain applications. Create and manage EVM (Ethereum, Polygon, BSC, Arbitrum, Optimism, Base, Avalanche) and Solana wallets with encrypted local storage. Query balances for native tokens (ETH, MATIC, BNB, SOL) and standard tokens (ERC20, SPL). Send transactions, interact with smart contracts, and manage multiple addresses across 12+ networks. Secure password-protected key storage with AES-256 encryption. Use for: (1) Creating new crypto wallets, (2) Importing existing wallets, (3) Checking token balances across chains, (4) Sending cryptocurrency and tokens, (5) Interacting with DeFi protocols and smart contracts, (6) Multi-chain portfolio management, (7) NFT transfers, (8) Blockchain development and testing. Keywords: crypto, cryptocurrency, wallet, blockchain, ethereum, solana, web3, defi, token, erc20, nft, smart contract, metamask alternative, hardware wallet, cold storage, hot wallet, blockchain wallet, digital wallet, bitcoin."
---

# CryptoWallet

• Confidence: 84% confidence
• Finding: Create and manage EVM (Ethereum, Polygon, BSC, Arbitrum, Optimism, Base, Avalanche) and Solana wallets with encrypted local storage. Query balances for native tokens (ETH, MATIC, BNB, SOL) and standar

Unpinned Dependencies

Low

• Category: Supply Chain

Content

web3>=6.0.0
solana>=0.30.0
solders>=0.18.0
eth-account>=0.9.0

• Confidence: 94% confidence
• Finding: web3>=6.0.0

Unpinned Dependencies

Low

• Category: Supply Chain

Content

web3>=6.0.0
solana>=0.30.0
solders>=0.18.0
eth-account>=0.9.0
cryptography>=41.0.0

• Confidence: 94% confidence
• Finding: solana>=0.30.0

Unpinned Dependencies

Low

• Category: Supply Chain

Content

web3>=6.0.0
solana>=0.30.0
solders>=0.18.0
eth-account>=0.9.0
cryptography>=41.0.0
base58>=2.1.0

• Confidence: 92% confidence
• Finding: solders>=0.18.0

Unpinned Dependencies

Low

• Category: Supply Chain

Content

web3>=6.0.0
solana>=0.30.0
solders>=0.18.0
eth-account>=0.9.0
cryptography>=41.0.0
base58>=2.1.0

• Confidence: 94% confidence
• Finding: eth-account>=0.9.0

Unpinned Dependencies

Low

• Category: Supply Chain

Content

solana>=0.30.0
solders>=0.18.0
eth-account>=0.9.0
cryptography>=41.0.0
base58>=2.1.0

• Confidence: 96% confidence
• Finding: cryptography>=41.0.0

Unpinned Dependencies

Low

• Category: Supply Chain

Content

solders>=0.18.0
eth-account>=0.9.0
cryptography>=41.0.0
base58>=2.1.0

• Confidence: 89% confidence
• Finding: base58>=2.1.0

Known Vulnerable Dependency: web3==6.0.0 — 1 advisory(ies): CVE-2026-40072 (web3.py: SSRF via CCIP Read (EIP-3668) OffchainLookup URL handling)

Low

• Category: Supply Chain
• Confidence: 72% confidence
• Finding: web3==6.0.0

Known Vulnerable Dependency: cryptography==41.0.0 — 10 advisory(ies): CVE-2023-50782 (Python Cryptography package vulnerable to Bleichenbacher timing oracle attack); GHSA-537c-gmf6-5ccf (Vulnerable OpenSSL included in cryptography wheels); CVE-2024-26130 (cryptography NULL pointer dereference with pkcs12.serialize_key_and_certificates) +7 more

High

• Category: Supply Chain
• Confidence: 97% confidence
• Finding: cryptography==41.0.0

VirusTotal

66/66 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.