Security audit

Arbitrum Bridge Helper

Security checks for vulnerabilities and agentic risk

Overview

This skill is review-worthy because it directs an agent to find local wallet secrets and use them for real Arbitrum bridge transactions.

Install only if you are comfortable with an agent handling wallet secrets and signing real blockchain transactions. Use a dedicated low-balance wallet, explicitly specify the wallet address and approved secret location, do not allow broad disk searches, and verify every route, amount, asset, approval, and transaction before confirming.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Missing User Warnings

Medium

Confidence: 96% confidence
Finding: The skill explicitly instructs the agent to scan local files, environment files, keystores, and password sources to locate usable wallet credentials. Even if it avoids printing the secrets, this normalizes unauthorized credential discovery and use from disk without explicit, informed user consent, creating a high risk of secret exfiltration, misuse of funds, and boundary violation across unrelated projects.

Vague Triggers

Medium

Confidence: 87% confidence
Finding: The trigger list includes highly generic verbs such as "move," "send," "check," and "claim," which can match many unrelated wallet or token-management requests once minimal Arbitrum context is present. In a routing system, this can cause the skill to activate on unintended prompts, leading users into bridge-specific guidance when they were asking for something else and increasing the chance of unsafe or confusing transaction flows.

Ssd 3

High

Confidence: 98% confidence
Finding: The skill description says to execute bridge tasks with a wallet found on disk and to default to locating a wallet locally instead of asking the user for secrets. This encourages the agent to seek out and use sensitive credentials from the filesystem as part of normal operation, which is dangerous because it turns local secret discovery into an execution primitive for financial transactions.

Ssd 3

High

Confidence: 99% confidence
Finding: The wallet discovery workflow directs the agent to mine `.env` files, JSON keystores, wallet configs, and password sources on disk, then choose a valid funded wallet for transaction execution. In context, this is especially dangerous because the skill is designed to sign and broadcast real blockchain transactions, so any discovered credential can be immediately weaponized to move assets without robust provenance, ownership verification, or narrowly scoped consent.

Static analysis

No suspicious patterns detected.