ClawHub
Back to skill

Security audit

FarmDash Signal Architect

Security checks across malware telemetry and agentic risk

Overview

FarmDash is a high-risk DeFi skill, but its artifacts disclose the wallet-affecting behavior, require local signing or bounded delegation, and include user confirmation guardrails.

Install only if you are comfortable with a DeFi skill that can prepare wallet-affecting trades and supervised automation. Never provide private keys or seed phrases, verify token addresses, fees, slippage, destination wallets, budgets, allowlists, and revocation settings yourself, and require a fresh quote plus explicit confirmation before signing anything.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Intent-Code Divergence

Medium
Confidence
91% confidence
Finding
The skill contains contradictory execution semantics: `execute_swap` states FarmDash does not broadcast transactions, while `confirm_swap` says it is used after the agent broadcasts the on-chain transaction. In a DeFi trading skill, this ambiguity is dangerous because an agent may incorrectly assume custody or submission responsibilities, skip required confirmation/settlement steps, or mislead users about whether a signed transaction was actually sent.

Intent-Code Divergence

Medium
Confidence
94% confidence
Finding
The `safetyMode` field is defined as `SwapSafetyMode` with enum values `strict` and `balanced`, but its description claims it is a USD estimate that unlocks fee discounts. This mismatch can cause agent developers or autogenerated clients to send the wrong data type or misunderstand the control as economic input rather than execution-safety behavior, potentially disabling intended guardrails or producing unsafe swap behavior. In a DeFi execution API, semantic confusion around a safety control is materially risky because clients may make wallet-affecting decisions based on incorrect docs.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.