ClawHub
Back to skill

Security audit

Trend Confirmed

Security checks for vulnerabilities and agentic risk

Overview

This skill is coherent for a paid crypto trading-signal endpoint, but it asks an agent to use a raw EVM private key for automatic paid requests without strong guardrails.

Review before installing. Use only a dedicated low-balance wallet on Base mainnet, assume each invocation can spend USDC, and avoid exposing a wallet private key that holds funds you are not prepared to risk.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill instructs the agent to make an x402-authenticated request using an EVM private key, and it emphasizes convenience ('No API key, no account') without a prominent warning that the call will authorize a paid on-chain wallet-backed transaction. This creates a real risk of unexpected spending from the user's wallet, especially in autonomous agent contexts where users may not realize that simply invoking the skill can consume funds.

Static analysis

No suspicious patterns detected.