ClawHub

Qelt Contracts

Security checks across malware telemetry and agentic risk

Overview

This skill is a narrowly scoped QELT smart-contract verification helper that clearly discloses its external API use and the risk that submitted source code becomes public.

Install this only if you intend to use QELT contract verification. Before submitting, review the exact source files, constructor arguments, and libraries because successful verification can publish source permanently. Do not submit private keys, secrets, proprietary code you do not want public, or unreviewed local files. Treat the optional npm plugin and global CLI as separate dependencies to review before use.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

External Transmission

Medium
Category
Data Exfiltration
Content
### 1. Check if Already Verified (Do This First)

```bash
curl -fsSL "https://mnindexer.qelt.ai/api/v2/contracts/0xCONTRACT/verification"
```

If `"verified": true` → return existing source/ABI to user, no submission needed.
Confidence
60% confidence
Finding
curl -fsSL "https://mnindexer.qelt.ai/api/v2/contracts/0xCONTRACT/verification" ``` If `"verified": true` → return existing source/ABI to user, no submission needed. ### 2. Submit Single-File Contra

Unrestricted Tool Access

Medium
Category
Excessive Agency
Content
npx hardhat qelt:verify --network qelt 0xCONTRACT_ADDRESS
```

**CLI Tool:** `npm install -g qelt-verify` → `qelt-verify verify 0x... ./Contract.sol --compiler-version 0.8.20 --optimize`
Confidence
85% confidence
Finding
Tool:*

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal