ClawHub
Back to skill

Security audit

x402-payment-demo

Security checks across malware telemetry and agentic risk

Overview

This is a coherent x402 payment demo, but it tells the agent to automatically perform blockchain payment and signing steps without clear confirmation or spending limits.

Install only if you intend to test x402 payments. Use Nile or Shasta testnets unless you deliberately intend real-funds behavior, and require the agent to show the exact network, recipient, asset, amount, and signature request before any payment or permit signing, especially on mainnet.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill explicitly instructs the agent to perform payment automatically and delete a local temporary file, but it provides no requirement to obtain explicit user confirmation before spending funds or modifying local files. Even in a demo context, automatic financial actions and filesystem cleanup can violate user expectations and create unauthorized spending or unintended data-handling risks.

Natural-Language Policy Violations

Low
Confidence
84% confidence
Finding
Defaulting to the TRON Nile network without explicit opt-in is a weaker but real safety issue because it causes the agent to initiate blockchain-related behavior on behalf of the user without confirming the selected network. In this demo skill, Nile is a test network, which reduces financial severity, but implicit network selection can still confuse users and normalize unattended payment flows.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.