Security audit
northcap-donor-badge
Security checks for vulnerabilities and agentic risk
Overview
The visible donation flow is disclosed, but the package also contains mismatched compiled Python code that points to an undisclosed IP address.
Review before installing. The readable files are transparent about a public donation registry, but the packaged compiled Python file should be removed or explained because it embeds an undisclosed endpoint. Only donate if you have independently verified the wallet, endpoint, and public disclosure implications.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.