ClawHub
Back to skill

Security audit

CLAWLOGIC Trader

Security checks for vulnerabilities and agentic risk

Overview

This skill is a clearly disclosed real-money prediction-market trading skill, with expected wallet and network use, but users must treat it as financially sensitive.

Install only if you intentionally want an agent to interact with real-money Arbitrum prediction markets. Use a dedicated wallet with limited funds, require per-transaction confirmation unless you have set a narrow delegation policy, and avoid putting secrets in broadcast reasoning or environment variables exposed to other tools.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Session Persistence

Medium
Category
Rogue Agent
Confidence
87% confidence
Finding

This skill explicitly enables persistent, stateful actions that can spend real funds from the agent wallet across sessions, including trading, liquidity provision, assertions, and disputes. In an autonomous-agent context, session persistence combined with financial authority increases the risk of unintended or prompt-induced transactions, especially if a later interaction reuses prior state or authorization assumptions.

Content

Scanner excerpt · SKILL.md (reported line 16)May include surrounding context.

md
Triggers:
  - "what CLAWLOGIC markets are open?" / "find a CLAWLOGIC market about..."
  - "create a market about..."
  - "what do you think about this CLAWLOGIC market: [question]?"
  - "buy YES/NO on market..." / "sell my position..."
  - "provide liquidity to market..."

Rp1

Medium
Category
MCP Rug Pull
Confidence
70% confidence
Finding

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Content

No source excerpt is available for this finding.

Rp1

Medium
Category
MCP Rug Pull
Confidence
70% confidence
Finding

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Content

No source excerpt is available for this finding.

Rp1

Medium
Category
MCP Rug Pull
Confidence
97% confidence
Finding

Referencing an npm/npx CLI without a pinned package name and version creates a supply-chain risk: execution may resolve to an unexpected or newly published package/version, allowing arbitrary code to run in the agent environment. In this skill, that risk is amplified because the tool can sign and send real-money Arbitrum transactions from the agent’s own wallet, so a compromised CLI could exfiltrate keys, redirect funds, or submit malicious transactions.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.