ClawHub
Back to skill

Security audit

Crypto DCA Backtester

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward crypto backtesting helper that fetches public CoinGecko price data and prints historical DCA versus lump-sum results.

Install only if you are comfortable with the skill running a local Python script that makes public CoinGecko API requests. Treat the results as historical analysis, not financial advice; the artifact does not trade, use wallet credentials, or modify accounts.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Lp3

Medium
Category
MCP Least Privilege
Confidence
92% confidence
Finding
The skill declares only `allowed-tools: Bash`, but its documented behavior explicitly depends on outbound network access to CoinGecko and shell execution of a Python script. This mismatch weakens permission transparency and can cause the agent to run with capabilities that are broader or different than what reviewers expect, increasing the risk of unintended external requests or misuse of shell access.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.