ClawHub
Back to skill

Security audit

Cross-Exchange Arbitrage Scanner

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed, user-run crypto price checker that fetches public market data and does not trade, persist, or handle credentials.

Install only if you are comfortable with the skill making unauthenticated outbound requests to public crypto exchange APIs when you run it. Treat results as informational gross spreads only, since it does not account for fees, transfer time, liquidity depth, or execution risk.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Lp3

Medium
Category
MCP Least Privilege
Confidence
88% confidence
Finding
The skill explicitly instructs the user to run a Python script that fetches live public quotes from multiple exchanges, which requires outbound network access, yet no corresponding permission is declared. This creates a transparency and policy gap: the skill's real capabilities are broader than its declared security model, making review, sandboxing, and user trust weaker.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.