ClawHub
Back to skill

Security audit

XRPL Token Sniping

Security checks for vulnerabilities and agentic risk

Overview

The skill is openly about high-risk XRPL token sniping and includes live trade-submission guidance without enough user-control safeguards.

Install only if you intentionally want an agent to assist with speculative XRPL token monitoring and possible trading. Before use, add strict controls: read-only monitoring by default, explicit confirmation for every transaction, hard spend and slippage limits, dry-run testing, and a clear separation between detection and live execution.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Missing User Warnings

High
Confidence
98% confidence
Finding
The skill includes executable trade-placement logic that submits an XRPL Payment transaction to acquire a token, but it does not present a prominent live-trading warning, require explicit user confirmation, or enforce simulation/dry-run by default. In context, this is more dangerous because the entire skill is designed for fast token sniping and even references front-running, creating strong pressure for immediate execution of high-risk financial actions.

Vague Triggers

Medium
Confidence
94% confidence
Finding
The description advertises broad capabilities including detecting launches, monitoring mempool activity, front-running buys, and reserve management without clear constraints, guardrails, or approval boundaries. In an agent setting, this can cause the skill to be invoked for risky trading behavior too readily, especially because the content is explicitly oriented toward speculative sniping and front-running.

Static analysis

No suspicious patterns detected.