ClawHub
Back to skill

Security audit

Buy a travel eSIM - via x402 USDC Base Wallet

Security checks across malware telemetry and agentic risk

Overview

This skill is a coherent eSIM purchasing helper, but users should treat it like a real checkout because it can spend USDC on Base Mainnet.

Install only if you trust esimqr.link and are comfortable with wallet-based purchases. Before approving any transaction, confirm mainnet versus testnet, package, USDC amount, token contract, recipient address from the 402 response, and gas cost; use testnet or a limited-balance wallet for testing.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The README describes a workflow that results in on-chain USDC spending but does not explicitly warn users that purchases involve real funds, gas fees, and potentially irreversible wallet transfers. In an agent-mediated context, this omission increases the risk of unintended authorization or user misunderstanding, especially because the flow is presented as a simple four-step process ending in payment.

Vague Triggers

Medium
Confidence
94% confidence
Finding
The invocation guidance is broad enough to trigger a purchase-capable skill from common travel or connectivity requests, increasing the chance that an agent routes users into a real-money purchasing workflow without sufficiently explicit intent. In this skill, that risk is amplified because the default path is Base Mainnet and the workflow can lead to an on-chain USDC payment and disclosure of provisioning data to an external service.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill does not clearly warn that package searches, purchase requests, wallet/payment metadata, and eSIM provisioning outputs are shared with an external third-party service. This can lead users to unknowingly expose transactional and telecom-related data, and in this context the risk is more serious because the workflow combines financial activity with potentially sensitive travel/connectivity information.

Unpinned Dependencies

Low
Category
Supply Chain
Content
requests>=2.28.0
Confidence
95% confidence
Finding
requests>=2.28.0

Known Vulnerable Dependency: requests==2.28.0 — 7 advisory(ies): CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi); CVE-2026-25645 (Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility func) +4 more

High
Category
Supply Chain
Confidence
73% confidence
Finding
requests==2.28.0

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.