ClawHub
Back to skill

Security audit

Outsmart LP Farming

Security checks for vulnerabilities and agentic risk

Overview

The skill matches its Solana LP farming purpose, but it can move real crypto funds through an unpinned external CLI that receives a raw mainnet private key.

Review this before installing. Use only a dedicated low-value wallet, verify the exact CLI package and version, prefer a signer that previews every transaction, and do not expose a wallet containing unrelated assets or authorities.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T08 · Insecure Dependencies

Error
Location
SKILL.md:4
Finding

Unpinned npm Dependency Receives Access to a Mainnet Wallet Private Key

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill includes ready-to-run commands that create pools, add/remove liquidity, and claim fees on Solana mainnet while the metadata explicitly requires a PRIVATE_KEY and MAINNET_ENDPOINT. Because there is no prominent warning that these commands can sign real transactions, move user funds, and be irreversible, a user or downstream agent could execute them without appreciating the financial risk, especially in an automation context.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.