ClawHub
Back to skill

Security audit

Agent Casino

Security checks for vulnerabilities and agentic risk

Overview

This skill is for real cryptocurrency gambling and includes high-impact money-moving commands without adequate safeguards, plus a hard-coded referral code that may financially benefit someone else.

Review this carefully before installing. Only use it if you understand it is for real cryptocurrency gambling, are legally allowed to gamble in your jurisdiction, and will require explicit confirmation for every registration, deposit, bet, and withdrawal. Remove or replace the hard-coded referral code unless you intentionally approve it, keep API keys out of prompts/logs/source files, set strict spending and loss limits, and verify currency, chain, amount, and withdrawal address before any transfer.

A.I.G

Vulnerability Patterns
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (2)

other

Warning
Location
SKILL.md:20
Finding

Undisclosed Fixed Affiliate Attribution During Registration

Content
View full analysis
Remediation
View remediation

T09 · Insecure Skill Coding Practices

Warning
Location
SKILL.md:29
Finding

Real-Money Operations Lack Transaction-Specific Confirmation Safeguards

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Missing User Warnings

High
Category
Not specified by scanner
Confidence
97% confidence
Finding

The skill explicitly enables real-cryptocurrency gambling and references deposits and withdrawals of user funds without any warning about financial loss, legality, age restrictions, addiction risk, or the fact that real money is at stake. In an agent setting, this omission is dangerous because a user may trigger irreversible wagering behavior through automation without informed consent or appropriate safeguards.

Content

No source excerpt is available for this finding.

Missing User Warnings

High
Category
Not specified by scanner
Confidence
98% confidence
Finding

The setup flow instructs users to deposit cryptocurrency and later withdraw it, but provides no warning that blockchain transfers are typically irreversible and that sending funds to the wrong address, chain, or currency can permanently destroy assets. Because this skill targets automated agents, the lack of address, chain, and amount verification steps materially increases the risk of unrecoverable financial loss.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
89% confidence
Finding

The registration call transmits a wallet address, agent name, and referral code to an external gambling service, creating privacy, tracking, and account-linkage risk. While external communication is inherent to the skill's purpose, users are not warned that identifying wallet metadata is being sent to a third party operating a real-money gambling platform.

Content

Scanner excerpt · SKILL.md (reported line 20)May include surrounding context.

1. Register

bash
curl -X POST https://agent.rollhub.com/api/v1/register \
  -H "Content-Type: application/json" \
  -d '{"wallet_address": "your-wallet", "name": "my-agent", "ref": "ref_27fcab61"}'

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 98)May include surrounding context.

Every bet is cryptographically verifiable:

bash
curl https://agent.rollhub.com/api/v1/verify/<bet_id> -H "X-API-Key: YOUR_KEY"

Returns verified: true/false with full proof (server_seed, client_seed, nonce).

Static analysis

No suspicious patterns detected.