ClawHub
Back to skill

Security audit

jovay-interaction-skill

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed Jovay/Ethereum CLI helper, but users should handle wallet keys and real transactions carefully.

Install only if you trust the jovay-cli npm package and understand Jovay/Ethereum transaction risk. Prefer testnet or a low-balance wallet first, avoid pasting private keys or encryption passwords into chat or shell commands, and verify network, recipient, amount, token, spender, contract, and gas settings before any --broadcast command.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill explicitly instructs users to pass private keys via `--sk` on the command line, including in setup and transaction examples. Command-line secrets are commonly exposed through shell history, process listings, logging, terminal recordings, and agent traces, so this creates a realistic credential-compromise path that could lead to wallet takeover and theft of funds.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill provides many ready-to-run `--broadcast` examples for transfers, approvals, bridge actions, and contract writes, but does not give a prominent warning that these operations are irreversible and may immediately move assets or change on-chain permissions. In an agent setting, concise executable examples can encourage unsafe execution without sufficient confirmation, increasing the chance of accidental loss, token approvals, or permanent state changes.

Static analysis

No suspicious patterns detected.