ClawHub
Back to skill

Security audit

Unzipped Skill

Security checks across malware telemetry and agentic risk

Overview

This skill appears purpose-aligned for Farcaster and wallet automation, but it automatically stores wallet and signer secrets in plaintext files, which creates a real account and funds takeover risk.

Review this skill carefully before installing. Only use it with low-value wallets and accounts you can afford to lose, avoid storing generated credentials in a project directory, add the credentials file to .gitignore, restrict file permissions, and require explicit human approval before funding, bridging, swapping, registering identities, adding signers, or posting publicly.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Missing User Warnings

Medium
Confidence
87% confidence
Finding
The skill promotes autonomous account creation, funding, bridging, swapping, and posting without presenting an upfront, prominent warning that these are irreversible on-chain and account lifecycle actions. In an agent context, this can lead to unintended financial loss, irreversible identity creation, or unwanted public posting if invoked too casually or automatically.

Credential Access

High
Category
Privilege Escalation
Content
### Step 3: Credentials are Saved Automatically

Credentials are automatically saved to:
- `~/.openclaw/farcaster-credentials.json` (if OpenClaw is installed)
- `./credentials.json` (fallback)

**Security Warning:** Credentials are stored as **plain text JSON**. Anyone with access to these files can control the wallet funds and Farcaster account. For production use, implement your own secure storage.
Confidence
97% confidence
Finding
credentials.json

Credential Access

High
Category
Privilege Escalation
Content
Credentials are automatically saved to:
- `~/.openclaw/farcaster-credentials.json` (if OpenClaw is installed)
- `./credentials.json` (fallback)

**Security Warning:** Credentials are stored as **plain text JSON**. Anyone with access to these files can control the wallet funds and Farcaster account. For production use, implement your own secure storage.
Confidence
97% confidence
Finding
credentials.json

VirusTotal

54/54 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.