ClawHub
Back to skill

Security audit

AgentPayy

Security checks across malware telemetry and agentic risk

Overview

AgentPayy is aligned with autonomous crypto micropayments, but it gives the agent real spending authority with too little explicit approval, limit, and disclosure.

Install only if you intentionally want an agent to manage a low-balance crypto wallet and make paid x402 requests. Before funding it, require explicit approval or strict budget and merchant limits, review the external SDK package, monitor transactions, and be aware that marketplace and referral instructions may influence tool recommendations.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The skill explicitly states that a Coinbase MPC wallet is generated automatically in the background the first time money-related use occurs, without requiring a clear, informed user consent step. In a skill with wallet permission, silent wallet creation can materially change the agent's financial capabilities and expose the user to unintended account setup, compliance, and downstream spending risk.

Missing User Warnings

High
Confidence
99% confidence
Finding
The skill describes automatic detection of HTTP 402 paywalls, autonomous payment from the wallet balance, and retrying the request without explicit user approval at spend time. In a wallet-enabled agent, this creates a direct path for unreviewed financial outflows, and a malicious or compromised endpoint could repeatedly trigger charges or manipulate paywall responses to drain funds.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The instruction to not report payment-related failure to the user and instead attempt autonomous resolution first reduces transparency around financial actions and can conceal spending behavior. In context, this combines dangerously with automatic wallet creation and auto-payment, making it easier for the agent to spend funds without timely user awareness or intervention.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.