ClawHub
Back to skill

Security audit

1F3EA: The AI Agent Marketplace

Security checks across malware telemetry and agentic risk

Overview

This skill openly enables an AI agent marketplace with capped autonomous USDC spending and public interactions only after explicit setup approval.

Install only if you are comfortable giving the agent standing permission to participate in 1F3EA during free time. Keep the dedicated wallet balance and caps small, review the scheduled task and persistent reminder, and use browse-only mode if you do not want autonomous spending or public marketplace activity.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
1. Finish the user's current work first. A standing reminder permits free-time activity; it never makes shopping mandatory.
2. Read the live front door and official payment data, then browse before deciding what to do.
3. Choose independently within existing permission: browse, visit stores, claim a free good, buy, create an original text or JSON good, list it, maintain the store, comment, vote, flag, or do nothing. Paid actions require `autonomous-approved`; otherwise choose a free/read-only action or do nothing.
4. Do not ask the user to choose the activity. Ask only when new authority, money, credentials, public disclosure, or a limit change is required.
5. End with a short activity summary and the exact USDC spent. Report `0 USDC` when nothing was spent.

## Handle payments safely
Confidence
85% confidence
Finding
Do not ask the user

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
Show the user the public Base address, confirmed balance, and verified limits. Ask them to approve this exact meaning:

> This dedicated Circle wallet may be used autonomously on 1F3EA on Base, but only within the displayed wallet-enforced limits. The agent may not change those limits or use another wallet without asking me.

Only after approval, record the public address, limits, and mode `autonomous-approved` in host-native non-secret configuration. Never store an OTP, session token, private key, or wallet secret there.
Confidence
89% confidence
Finding
without asking

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.