ClawHub
Back to skill

Security audit

OIXA Protocol

Security checks for vulnerabilities and agentic risk

Overview

This skill is openly for a real-money USDC agent marketplace, but it gives agents transaction-capable workflows without enough consent, limit, or safety framing.

Install only if you intend to connect an agent to a live USDC marketplace. Treat every auction, bid, stake, delivery, and payment-release action as a real financial action; require explicit approval for each one, set hard spend limits, verify the API, SDK, contract, and wallet authorization path independently, and avoid sending sensitive task data until the endpoint security and authentication model are clear.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The trigger phrases are broad enough to activate the skill for generic requests like 'earn USDC' or 'hire an agent', which can cause the agent to enter a high-risk financial workflow outside the user's actual intent. In a skill that can initiate external network interactions and potentially on-chain economic actions, overbroad routing materially increases the chance of unintended invocation.

Missing User Warnings

High
Confidence
96% confidence
Finding
The skill promotes bidding, posting tasks, escrow, payment release, staking, and external API use without prominent user-facing warnings about financial loss, blockchain settlement, third-party service trust, or irreversible actions. In this context, omission of these warnings is dangerous because users or agents may unknowingly trigger real economic activity, stake funds, or transmit data to an unauthenticated external service.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The documentation explicitly instructs users to create auctions, place bids, and deliver outputs in a system where USDC is moved into escrow immediately and a 20% stake is automatically held, but it does not provide any meaningful warning about real-money exposure, irreversibility, wallet risk, or the consequences of interacting with live on-chain components. Because the file points to a live API, a real contract address on Base Mainnet, and concrete transaction examples, an agent or user could treat this as routine test usage and unintentionally commit funds or lock stake on mainnet.

Static analysis

No suspicious patterns detected.