ClawHub
Back to skill

Security audit

Monero Vs Bitcoin

Security checks across malware telemetry and agentic risk

Overview

This is a static Monero-versus-Bitcoin comparison with no code execution or system access, though users should treat the crypto guidance and tip address cautiously.

Read this as general cryptocurrency commentary, not financial, legal, or tax advice. Check local laws and exchange rules before acting, and only send funds to the listed XMR tip address if you independently intend to make that donation.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill promotes and normalizes use cases for a privacy-preserving cryptocurrency, including business confidentiality, political activism, censorship resistance, and fungibility, without any warning about legal, regulatory, sanctions, AML/KYC, tax, or jurisdiction-specific compliance risks. In an agent context, this can steer users toward regulated or high-risk financial activity while omitting important safeguards, increasing the chance of misuse for evasion or other unlawful conduct.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.