ClawHub
Back to skill

Security audit

Karpak life register

Security checks for vulnerabilities and agentic risk

Overview

The skill’s wallet registration and minting flow is coherent, but its unauthenticated local browser bridge creates a real tampering risk during wallet signing and transaction approval.

Review before installing. Only run this while no untrusted websites are open, confirm the exact environment and transaction details in the wallet, and prefer an updated version that protects the local bridge with a per-session secret or stricter origin checks.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Context-Inappropriate Capability

Medium
Confidence
97% confidence
Finding
The local HTTP bridge exposes unauthenticated endpoints and explicitly allows any origin via Access-Control-Allow-Origin: *. Any website visited by the user can issue cross-origin requests to the localhost server, poll /next-action, post forged data to /submit, or interact with health and bridge endpoints, which can tamper with the wallet flow or race legitimate responses. In the context of a wallet registration/minting skill, this is especially dangerous because the bridge mediates sensitive address, signature, and transaction state.

Static analysis

No suspicious patterns detected.