ClawHub
Back to skill

Security audit

go-deribit

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Go integration guide for Deribit APIs; it involves sensitive trading/account actions only because that is the stated purpose.

Install only if you intend to generate Go code for Deribit. Use testnet first, keep `DERIBIT_ACCESS_TOKEN` out of source control and logs, and review any generated order, transfer, withdrawal, or account-administration call before running it against production.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Credential Access

High
Category
Privilege Escalation
Confidence
70% confidence
Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · references/setup.md (reported line 8)May include surrounding context.

md
## Requirements

- Go 1.26.9 or newer, per `go.mod`.
- An OAuth access token for private REST requests. The example reads `DERIBIT_ACCESS_TOKEN`; public REST market data and most public subscriptions need no credentials.

## Install

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
77% confidence
Finding

This markdown file applies to SQP-2, and it instructs users to provide DERIBIT_ACCESS_TOKEN, which is a sensitive credential. The text explains how the token is used but does not include any warning about protecting the token, avoiding accidental logging/sharing, or limiting its exposure.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.