ClawHub
Back to skill

Security audit

Qelt Indexer

Security checks for vulnerabilities and agentic risk

Overview

This appears to be a bounded QELT blockchain lookup skill with no local persistence, credential handling, or code execution beyond documented API queries.

Install this if you are comfortable sending QELT block, transaction, and wallet lookup queries to the listed QELT indexer domains. Keep use to the documented read-only lookup workflows unless you separately review any contract-verification endpoints in the bundled reference.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Self-Modification

High
Category
Rogue Agent
Content
## Adding New Endpoints

Update SKILL.md when new indexer endpoints are added.
- Keep the response shape examples accurate
- Add new endpoints in the correct category with working curl examples
- Update the rate limits table if new tiers are introduced
Confidence
85% confidence
Finding
Skill modifies its own code, configuration, or behavior at runtime. Self-modification enables an agent to escalate privileges, disable safety constraints, or install persistent backdoors.

Unbounded Resource Access

Medium
Category
Excessive Agency
Content
- Never fabricate block numbers, tx hashes, or balances — always fetch live data.
- Check indexer sync before reporting "latest" data: `GET /v1/health/ready` → `lag` field.
- Exponential backoff on HTTP 503 (`{"error": "Rate limit exceeded"}`).
- Use `limit` and `offset` for all list endpoints — avoid unbounded queries.

## Endpoints
Confidence
80% confidence
Finding
Skill allows unbounded resource consumption (API calls, storage, compute). Without rate limits or quotas, a compromised or misbehaving agent can cause denial-of-service or cost overruns.

Static analysis

No suspicious patterns detected.