Security audit

TRON Energy Rental & Fee Optimization

Security checks for vulnerabilities and agentic risk

Overview

This skill matches its TRON energy-rental purpose, but it can create cost-affecting orders through a third-party API without built-in confirmation, limits, or access controls.

Review before installing. Use this only if you trust TRXDO and understand that chat commands may use your configured API credentials to submit energy-rental orders. Before enabling it in shared chats or production, add explicit confirmation, wallet-address validation, quantity and spending limits, authorized-user checks, audit logging, and safer secret storage.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (7)

Vague Triggers

Medium

Confidence: 89% confidence
Finding: The README provides trigger examples like '租赁能量 65000' and '能量查询' without defining authorization boundaries, confirmation requirements, or the exact conditions under which the skill will execute blockchain-affecting actions. In a skill that can automate energy rental and fee-related on-chain operations, ambiguous invocation patterns increase the risk of accidental or socially engineered execution.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The README markets '24 小时无人值守、秒级自动调用网络资源' but does not prominently warn users that the skill can initiate automated paid blockchain resource rentals and potentially support transaction execution without manual review. In a financial/blockchain context, missing risk disclosure can lead operators to deploy it with insufficient safeguards, causing unintended spending or abuse if commands are triggered improperly.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The skill explicitly promotes 24/7 unattended automation for TRON energy rentals and fee optimization, and instructs users to configure API credentials, but the description does not clearly warn that this can trigger blockchain resource purchases or fee-affecting operations tied to user accounts and spend. In the context of blockchain automation, omission of clear consent, authorization boundaries, and spending-risk disclosure can lead users to enable actions that consume funds or commit on-chain operations without adequate awareness.

Missing User Warnings

Medium

Confidence: 97% confidence
Finding: The subclass includes fields intended to hold an API ID and API key directly in code, which encourages hardcoded secret usage and makes accidental credential exposure through source control, logs, or redistributed binaries much more likely. Because these secrets are used to authenticate external API calls that can query balances and submit orders, compromise of the credentials could enable unauthorized financial or account actions.

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The submit_order method performs a potentially billable external action without any built-in confirmation, safety interlock, or explicit warning to the caller. In an agent skill context, this increases the chance of unintended purchases or resource rentals being triggered automatically or through prompt manipulation, making the operation materially riskier than a read-only API call.

Missing User Warnings

Medium

Confidence: 91% confidence
Finding: The manifest defines sensitive credential fields (`secretKey` and a user identifier) in default configuration without any visible warning, masking, or guidance for secure handling. In a network-enabled skill that talks to a third-party API, this increases the chance that users paste long-lived API keys into insecure storage, logs, screenshots, or shared config files, which could enable unauthorized API usage or account abuse if exposed.

Missing User Warnings

Medium

Confidence: 84% confidence
Finding: The skill sends a user-supplied blockchain address and quantity to an external API to place an order without any confirmation, warning, or validation beyond integer parsing. This can cause unintended external transactions or disclosure of sensitive operational data, especially because the action is triggered directly from natural-language commands.

Static analysis

No suspicious patterns detected.