ClawHub
Back to skill

Security audit

MoltArb

Security checks across malware telemetry and agentic risk

Overview

MoltArb is a coherent custodial crypto-wallet skill, but it gives an agent broad authority to sign and submit real financial transactions with limited visible safeguards.

Install only if you are comfortable trusting MoltArb as a custodial wallet provider. Use low-value wallets, protect the API key like a private key, require manual approval for every transfer, bridge, approval, contract send, or signature, and avoid unlimited approvals or raw hash signing unless you have independently verified the exact intent.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill documents an approval endpoint that explicitly allows `amount: "unlimited"` without any warning about the consequences of granting broad token allowances. Unlimited approvals are dangerous because a compromised or malicious spender can drain all approved tokens later, and users may not realize the permission persists beyond the immediate action.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
These sections describe bridge execution and other fund-moving operations as simple one-call actions but omit clear warnings that they trigger real on-chain transactions that may be irreversible, incur fees, or send funds to the wrong chain or asset context. That presentation increases the chance an agent or operator performs destructive financial actions without adequate confirmation or validation.

External Transmission

Medium
Category
Data Exfiltration
Content
-d '{"bidAmount": "5000000000000000000"}' | jq -r .hash)

# 2. Sign the hash via MoltArb (raw, no prefix)
SIG=$(curl -s -X POST https://moltarb.rose-token.com/api/wallet/sign-hash \
  -H "Authorization: Bearer $MOLTARB_KEY" \
  -H "Content-Type: application/json" \
  -d "{\"hash\": \"${HASH}\"}" | jq -r .signature)
Confidence
87% confidence
Finding
curl -s -X POST https://moltarb.rose-token.com/api/wallet/sign-hash \ -H "Authorization: Bearer $MOLTARB_KEY" \ -H "Content-Type: application/json" \ -d

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
SKILL.md:21