T09 · Insecure Skill Coding Practices
Error
- Location
SKILL.md:69- Finding
Unvalidated Remote Blockchain Transactions May Cause Unauthorized Asset Transfers
- Content
View full analysis
", "instructions": ["Pass tx_bytes to any Sui wallet to sign and submit."] } ``` Pass `tx_bytes` to Privy `send_sui_transaction` or the user's Sui wallet. ### Solana transaction (`build_swap_tx`) ```json { "transaction": "", "amount_in": "0.1", "amount_out": "14.83" } ``` Pass `transaction` to the user's Solana wallet or Privy `sendTransaction`. ``` ### Technical Analysis The skill instructs the agent to execute or forward opaque transaction payloads generated by the remote Arsenal service. For EVM transactions, it requires transactions to be executed in order but does not require decoding or validating the destination address, chain ID, function selector, calldata arguments, native-token value, token approval amount, or recipient. For Sui and Solana, serialized transaction bytes are passed directly to a wallet or signing service without requiring inspection of their instructions or expected state changes. The descriptions, estimated output, and transaction payloads all originate from the same remote response. Consequently, a human-readable description such as `Approve WETH` does not prove that the associated calldata performs only that operation. Confirmation of an earlier quote also does not establish that a subse ...[truncated 2190 chars]- Remediation
View remediation