ClawHub
Back to skill

Security audit

Zyfai Yield Automation

Security checks across malware telemetry and agentic risk

Overview

This is a legitimate-looking DeFi yield skill, but it gives an agent high-impact wallet and transaction authority without enough built-in scoping or confirmation guidance.

Review before installing. Use only funds you are willing to expose to DeFi risk, avoid giving an agent a raw wallet private key, pin and verify package versions, and require explicit approval for every deposit, withdrawal, smart-wallet deployment, session-key permission, cross-chain setting, profile change, and identity-registry transaction.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Context-Inappropriate Capability

Medium
Confidence
91% confidence
Finding
The skill’s stated purpose is DeFi yield management, but it also exposes on-chain identity-registry registration for agents. That extra capability can cause the agent to perform unrelated, irreversible blockchain actions that a user did not request, increasing attack surface and enabling unintended registration or reputation/identity side effects.

Vague Triggers

Medium
Confidence
84% confidence
Finding
The description says to use the skill whenever a user wants passive DeFi yield on their funds, which is broad enough to match many generic finance prompts. In an agentic environment, that increases the chance the skill is invoked without sufficiently specific user authorization, leading to wallet connection, deployment, deposits, or session-key setup in contexts where the user only wanted information.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill provides direct deposit, withdrawal, and smart-wallet setup instructions for real assets but does not place an explicit warning near those action flows that they move live funds, incur gas/bridge/protocol fees, and may involve asynchronous settlement or strategy risk. In a financial skill, omission of transactional warnings materially raises the chance of unsafe autonomous execution and uninformed user consent.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.