ClawHub
Back to skill

Security audit

Superfluid Protocol

Security checks across malware telemetry and agentic risk

Overview

This is a Superfluid protocol knowledge-base skill with disclosed DeFi contract guidance and helper scripts, not hidden automation or credential access.

Install only if you want Superfluid protocol development guidance. Before following examples that approve tokens, grant flow-operator permissions, sign EIP-712 payloads, or use relay providers, verify contract addresses from official sources, prefer capped allowances and granular flow limits, and revoke permissions when no longer needed.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The manifest explicitly recommends approving the strategy for `type(uint256).max` without a comparably prominent warning that unlimited ERC-20 approvals expose the user's entire token balance to loss if the approved strategy is buggy, upgraded maliciously, or later compromised. In this skill context, the danger is increased because the file is a knowledge/ABI reference that may be used to guide integrations or user-facing tooling, so downstream consumers may reproduce the unsafe approval recommendation as standard practice.

Missing User Warnings

Medium
Confidence
87% confidence
Finding
The manifest instructs users to grant the FlowScheduler contract Superfluid flow-operator permissions and Super Token allowance so it can create/delete flows and transfer a startAmount later. Even if this reflects intended protocol behavior, the document does not prominently warn that these approvals delegate spending/execution authority to a third-party contract and can be misused if the contract, configuration, or referenced deployment is wrong. In a knowledge-base skill, omission of that risk context can cause users to over-trust the setup and approve capabilities they do not fully understand.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.