Security audit
Security checks for vulnerabilities and agentic risk
This skill does what it says, but it guides agents through real NFT purchases, contract deployment, listings, and ownership transfer without enough explicit user approval safeguards.
Review carefully before installing. Use this only if you want agents to help with NFT marketplace actions, and require manual approval for every buy, mint, listing, deployment, and ownership transfer. Confirm the wallet, Base chain, contract address, function call, recipient, price, gas cost, and transaction hash before any on-chain action.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl "https://www.agentsmint.com/api/v1/collections/bitbuddies"
The skill instructs an agent to perform NFT purchase and mint flows that can trigger real blockchain transactions, but it provides no explicit warning that these actions are financially consequential and generally irreversible once submitted on-chain. In an agent setting, that omission increases the risk of unintended spending, signing the wrong transaction, or confirming a purchase without clear human authorization.
The collection creation and deploy instructions describe deploying a live contract and optionally transferring ownership, but they omit warnings about the permanence and security implications of those actions. An agent could unintentionally create publicly accessible contracts, assign control to the wrong wallet, or irreversibly transfer ownership without adequate operator review.
No suspicious patterns detected.