ClawHub
Back to skill

Security audit

Solidity Audit Precheck

Security checks for vulnerabilities and agentic risk

Overview

The skill is a coherent Solidity audit checklist, but its setup asks users to run unverified remote and unpinned package installers with broad local execution authority.

Review the setup commands before installing. Prefer pinned versions, isolated environments or containers, local/project installs, and checksum or signature verification for Foundry and other tools. Do not run these commands with sudo or from an account that has sensitive wallet, deployment, or production credentials available.

A.I.G

Vulnerability Patterns
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (2)

T03 · Remote Payload Retrieval and Execution

Error
Location
SKILL.md:53
Finding

Unverified Remote Script Is Piped Directly into Bash

Content
View full analysis
Remediation
View remediation
' 'foundry-installer.sh' | sha256sum --check - less foundry-installer.sh bash foundry-installer.sh ``` The project should replace the placeholders with a publisher-documented, version-specific artifact and an independently trusted checksum or signature. ]]>

T08 · Insecure Dependencies

Warning
Location
SKILL.md:46
Finding

Security Tools Are Installed from Registries Without Version or Integrity Pinning

Content
View full analysis
Remediation
View remediation
--locked aderyn`. - Foundry: use a pinned release artifact with verified signature or checksum, as described in the remote-execution finding. ]]>

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

External Script Fetching

High
Category
Supply Chain
Confidence
97% confidence
Finding

The skill instructs users to execute a remote script directly via curl ... | bash, which bypasses integrity verification and gives the remote server immediate code execution on the analyst's machine. If the hosting endpoint, network path, or upstream distribution is compromised, users following the skill could install malicious software during a security workflow, making this especially risky because the audience is likely to run the command with developer privileges.

Content

Scanner excerpt · SKILL.md (reported line 53)May include surrounding context.

md
pip install mythril

# Foundry (forge, cast, anvil) — for testing and gas snapshots
curl -L https://foundry.paradigm.xyz | bash && foundryup

# Solhint — linter for style and security rules
npm install -g solhint