ClawHub
Back to skill

Security audit

ClawDex Trading

Security checks across malware telemetry and agentic risk

Overview

This skill is transparent about enabling Solana token trading, but it gives an agent high-impact wallet authority through an unpinned external CLI and non-interactive real-swap commands.

Install only if you trust the ClawDex CLI and are comfortable letting an agent operate a Solana trading wallet. Use a dedicated low-balance wallet, verify and pin the CLI package before installing, avoid exposing keys in logs or transcripts, set strict safety guardrails, simulate first, and require explicit human confirmation before any real `--yes` swap.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill explicitly documents how to perform a real on-chain token swap using `clawdex swap --yes --json` but does not present an explicit user-facing warning that execution moves real assets irreversibly and may incur slippage, MEV, and financial loss. In an agent context, this is dangerous because the instructions normalize execution flow and could lead an automated system or inattentive operator to submit a live trade without clear confirmation of financial risk.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The onboarding section instructs users to pass an API key and reference a wallet private key file path without warning that these are sensitive secrets that must not be exposed in logs, shell history, transcripts, or shared environments. In an agent-operated environment, this increases the chance of credential leakage or unsafe handling of signing material, which could enable unauthorized wallet access or abuse of paid API credentials.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.