ClawHub
Back to skill

Security audit

Vincent - A secure wallet for your agent

Security checks across malware telemetry and agentic risk

Overview

This is a coherent crypto-wallet skill, but it gives an agent broad ongoing authority to move funds, sign messages, and place prediction-market bets unless the user locks it down first.

Review before installing. Use a dedicated low-balance wallet, claim it immediately, set spending limits, allowlists, and require-approval policies before funding it. Treat API keys and re-link tokens like financial credentials, and avoid raw signing or arbitrary contract calls unless you personally verify the target, chain, amount, and expected effect.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
This section documents token transfers, swaps, and arbitrary contract transactions, all of which can cause immediate and irreversible loss of funds if misused or if the agent acts on ambiguous prompts. Although the skill mentions policies and approvals, it does not clearly warn users that blockchain transactions may be irreversible, value-bearing, and risky by default—especially since actions are gas-sponsored and easy to execute.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The Polymarket section enables real-money betting and order placement without a prominent warning that users can lose funds, place orders at unfavorable prices, or interact with closed/illiquid markets. Because the workflow is operational and action-oriented, an agent could facilitate speculative trades without adequately surfacing financial risk or the irreversible nature of executed orders.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.