Security audit
Rustok Ethereum Agent Wallet (Console)
Security checks across malware telemetry and agentic risk
Overview
This disclosed wallet skill is not malicious, but it deserves Review because it can affect real crypto funds and uses persistent local wallet secrets.
Install only if you are comfortable treating this as a real-money self-custody wallet. Start with read-only capabilities or small funds, verify the Docker image provenance, keep the seed phrase, PIN, keyring password, and approval console outside the agent, and avoid using it with agents that have broad shell or docker exec access.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
1/64 vendors flagged this skill as malicious, and 63/64 flagged it as clean.
Static analysis
No suspicious patterns detected.