ClawHub
Back to skill

Security audit

Base 8004

Security checks for vulnerabilities and agentic risk

Overview

The skill is a coherent onchain registration guide, but it needs review because it tells users to print a wallet private key and publish persistent public agent metadata.

Review before installing or following this skill. Do not print wallet private keys; generate and store them in a secure wallet, encrypted keystore, or secret manager, and rotate any key that has appeared in logs. Publish only intentionally public agent names, descriptions, images, and service endpoints because onchain metadata is public and persistent. Use pinned dependencies or a trusted lockfile when running the examples.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)

T09 · Insecure Skill Coding Practices

Error
Location
SKILL.md:35
Finding

Wallet Private Key Exposed Through Console Logging

Content
View full analysis
Remediation
View remediation

T08 · Insecure Dependencies

Warning
Location
SKILL.md:31
Finding

Unpinned Third-Party Dependency Installation

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Credential Access

High
Category
Privilege Escalation
Confidence
60% confidence
Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 65)May include surrounding context.

Add .env to .gitignore if it isn't already:

text
echo ".env" >> .gitignore

Step 5: Security rules

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The skill encourages publishing agent metadata and service endpoints onchain but does not clearly warn that this information becomes publicly visible, widely indexed, and difficult or impossible to fully retract. This can expose operational details, internal endpoint structure, branding, or capability information that may aid targeting, enumeration, or unwanted long-term attribution.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The guide explicitly prints a newly generated private key to stdout, which can be captured by terminal scrollback, shell logging, CI logs, screen recordings, pair-programming sessions, or remote development environments. Because this key controls onchain assets and identity, any disclosure can immediately enable wallet takeover, theft of funds, and unauthorized updates to the registered agent identity.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.