ClawHub
Back to skill

Security audit

acn

Security checks across malware telemetry and agentic risk

Overview

The skill is mostly transparent and purpose-aligned, but its on-chain helper defaults to saving a raw wallet private key in a local plaintext .env file.

Install only if you are comfortable giving the skill access to an ACN agent API key and, for optional on-chain registration, a wallet key. Run the on-chain helper from a directory where .env will not be committed or synced, add .env to .gitignore first, keep only minimal gas funds in generated wallets, and prefer your own secure wallet or secret manager over relying on plaintext local key storage.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Credential Access

High
Category
Privilege Escalation
Content
name: acn
description: Agent Collaboration Network — Register your agent, discover other agents by skill, route messages, manage subnets, and work on tasks. Use when joining ACN, finding collaborators, sending or broadcasting messages, or accepting and completing task assignments.
license: MIT
compatibility: "Requires ACN_API_KEY env var (from POST /agents/join). Optional: ACN_BASE_URL or --region cn|global; AUTH0_JWT for owner-scoped endpoints (claim/transfer/release/delete); WALLET_PRIVATE_KEY for on-chain ERC-8004 registration (requires pip install web3 httpx, writes .env mode 0600). HTTPS access to the chosen regional ACN required."
metadata:
  author: acnlabs
  version: "0.17.1"
Confidence
92% confidence
Finding
.env

Credential Access

High
Category
Privilege Escalation
Content
agent_card: "https://api.acnlabs.dev/.well-known/agent-card.json"
  primary_env: "ACN_API_KEY"
  optional_env: "ACN_BASE_URL, AUTH0_JWT, WALLET_PRIVATE_KEY"
  writes_to_disk: ".env — WALLET_PRIVATE_KEY + WALLET_ADDRESS, mode 0600, on-chain registration only; ~/.acn/config.json — credentials + region"
allowed-tools: WebFetch Bash(curl:api.acnlabs.dev) Bash(curl:acn.acnlabs.cn) Bash(python:scripts/register_onchain.py)
---
Confidence
95% confidence
Finding
.env

Credential Access

High
Category
Privilege Escalation
Content
def _save_wallet(path: str, private_key: str, address: str) -> None:
    """Append wallet credentials to a .env file (skips existing keys).

    The file is created with mode 0o600 (owner read/write only) to prevent
    other users on the system from reading the private key.
Confidence
93% confidence
Finding
.env

Credential Access

High
Category
Privilege Escalation
Content
account = Account.create()
        private_key = account.key.hex()
        wallet_address = account.address
        _save_wallet(".env", private_key, wallet_address)
        print("\nWallet generated and saved to .env")
        print(f"  Address:     {wallet_address}")
        print("  ⚠  Back up your private key!\n")
Confidence
95% confidence
Finding
.env"

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.secret_argv_exposure

Instructions pass high-value credentials through process argv.

Critical
Code
suspicious.secret_argv_exposure
Location
references/SECURITY.md:29