ClawHub
Back to skill

Security audit

ERC-8004 Identity

Security checks across malware telemetry and agentic risk

Overview

This appears to be a legitimate Avalanche identity CLI, but it handles wallet private keys and can spend AVAX or make persistent on-chain changes without built-in confirmation steps.

Review before installing. Use a dedicated low-balance wallet, keep PRIVATE_KEY out of commits, logs, screenshots, and shell history, verify the Avalanche RPC and contract addresses, and expect deploy/set commands to spend real AVAX and make persistent public blockchain changes.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (5)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill instructs users to place a raw blockchain private key into an environment variable and even shows shell substitution that exports the secret into the current process environment. Environment variables are commonly exposed through shell history, process inspection, logs, crash reports, CI output, and child processes, so using them for high-value wallet keys without any warning or safer alternative materially increases the risk of wallet compromise and fund theft.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The deploy flow performs multiple irreversible on-chain transactions immediately, including identity registration, contract deployment, metadata updates, and price changes, without any confirmation prompt or dry-run summary. In a CLI handling real funds and persistent blockchain state, this increases the risk of accidental or unintended transactions caused by operator mistakes, bad config values, or command misuse.

Missing User Warnings

Low
Confidence
90% confidence
Finding
The set-metadata command sends an immediate blockchain transaction based on CLI input without confirmation. This can permanently write incorrect or sensitive metadata on-chain if the operator mistypes values or invokes the command unintentionally.

Missing User Warnings

Low
Confidence
90% confidence
Finding
The set-uri command updates on-chain agent URI immediately without confirmation. A mistaken or maliciously supplied URI could permanently point users to the wrong profile or harmful content, and the operation incurs irreversible transaction costs.

Missing User Warnings

Low
Confidence
91% confidence
Finding
The set-price command changes task pricing on-chain with no confirmation or sanity checks. Operator error could set an unintended price, including values that are too low, too high, or malformed, affecting business logic and possibly causing financial loss.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.