Million Bit Homepage NFTs

• Outcome: Pass
• Latest audit: Jul 10, 2026 · 4:30 AM UTC
• Version: 1.0.0

Overview

This skill appears to prepare an NFT mint transaction without taking custody of wallet keys or submitting it directly, but users should review cost and permanence before signing anything.

Install only if you intend to prepare a Base NFT mint for the Million Bit Homepage. Before signing with any wallet, verify the contract, chain, price, gas, recipient, image, and link because the transaction can spend real ETH and publish data permanently on-chain.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (5)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 94% confidence
• Finding: The skill explicitly instructs the agent to run shell commands such as `npm install` and multiple scripts under `scripts/`, yet the metadata does not declare any corresponding permissions or execution capabilities. This creates a trust and review gap: operators may approve or invoke the skill without realizing it can execute local commands, install dependencies, and process untrusted inputs through the shell.

Missing User Warnings

Medium

• Confidence: 96% confidence
• Finding: This skill prepares blockchain mint transactions that spend real ETH on Base and permanently publish image/link data on-chain, but the description and workflow do not present a prominent upfront warning about irreversible cost and permanence. An agent or user could proceed under the assumption that this is a reversible content upload, leading to unintended financial loss or permanent publication of sensitive or mistaken data.

Unpinned Dependencies

Low

• Category: Supply Chain

Content

"description": "OpenClaw bot skill for minting plots on the Million Bit Homepage",
  "private": true,
  "dependencies": {
    "pako": "^1.0.10",
    "ethers": "^6.13.0",
    "sharp": "^0.33.0"
  }

• Confidence: 92% confidence
• Finding: "pako": "^1.0.10"

Unpinned Dependencies

Low

• Category: Supply Chain

Content

"private": true,
  "dependencies": {
    "pako": "^1.0.10",
    "ethers": "^6.13.0",
    "sharp": "^0.33.0"
  }
}

• Confidence: 92% confidence
• Finding: "ethers": "^6.13.0"

Unpinned Dependencies

Low

• Category: Supply Chain

Content

"dependencies": {
    "pako": "^1.0.10",
    "ethers": "^6.13.0",
    "sharp": "^0.33.0"
  }
}

• Confidence: 93% confidence
• Finding: "sharp": "^0.33.0"

VirusTotal

66/66 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.