Miraix Wallet Roast

• Analyzed: May 11, 2026, 5:54 AM
• Findings: 1
• Version: 1.0.1
• Hash: 5a846ed66b55a0b70a8b1d1994e33d7b5ee8125223ff406de781071656c9dc0e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to a potential shell injection vulnerability in the `SKILL.md` instructions. It directs the AI agent to execute a `curl` command against an external API (`https://app.miraix.fun/api/wallet-audit`) using a user-provided Solana wallet address as a direct parameter. While the intent appears to be a legitimate wallet analysis service, the pattern of constructing shell commands with unvalidated user input is a high-risk practice that could be exploited if the agent is tricked into processing a malicious payload as a wallet address.