Security audit
Security checks for vulnerabilities and agentic risk
The skill is mostly a Dogecoin node helper, but it overbroadly routes unrelated data and file/API tasks into an exec-enabled wallet-adjacent skill.
Review before installing. Use this only for a local Dogecoin Core node you control, and avoid enabling it for generic database, analytics, file-writing, or external API tasks. Require explicit user confirmation before generating new wallet addresses, and do not expose RPC credentials or wallet data unnecessarily.
The manifest description contains conflicting invocation guidance by combining Dogecoin node management with database/SQL/storage directions. In a tool-selection pipeline, this ambiguity can misroute sensitive requests to an exec-capable skill, causing unsafe operations or disclosure in contexts unrelated to blockchain administration.
The trigger conditions say the skill should be used for broad data analysis, reporting, statistics, and visualization tasks, which are far outside the Dogecoin-node scope. Overbroad routing guidance is dangerous because it can cause this exec-enabled skill to activate in unrelated contexts, increasing the blast radius for misuse and accidental access to sensitive local resources.
The manifest description mixes Dogecoin node management with unrelated database/SQL/storage usage, creating ambiguous routing and scope confusion. In an agent ecosystem, this can cause the skill to be invoked for unrelated data tasks and then gain exec-mediated access in contexts the user did not intend, increasing the chance of unsafe command execution or data exposure.
The description states '支持中文交互' and the document consistently presents the skill as Chinese-first, but it does not clearly offer user language choice or explain that the tool is intentionally region-specific. This can violate language/locale policy when a skill effectively forces a specific language without opt-in.
The documentation claims the free edition is read-only/query-focused, but it explicitly includes getnewaddress, which changes wallet state by creating a new address. This mismatch can bypass user expectations and consent boundaries because an agent may treat the skill as harmless while performing state-changing wallet actions.
Exposing getnewaddress without a clear warning treats a state-changing wallet action like a harmless query. Even though address generation is less severe than sending funds, it can still alter wallet state, affect accounting workflows, and create privacy or operational confusion if executed automatically.
Example trigger phrases like '查看节点状态' and '查看钱包余额' are reasonable, but in the surrounding documentation they are embedded in a much broader and mismatched invocation model. This weak specificity increases the chance that the skill is selected without adequate confirmation of environment, node presence, or wallet-sensitivity considerations.
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
| 依赖 | 说明 | 安装方式 |
|------|------|----------|
| Dogecoin Core | 全节点客户端 | 从官方发布页下载对应平台二进制包 |
| jq | JSON格式化工具 | `sudo apt install jq` |
| 磁盘空间 | ≥70GB（含交易索引） | SSD推荐 |
| 内存 | ≥4GB | 8GB推荐 |
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
| 依赖 | 说明 | 安装方式 |
|------|------|----------|
| Dogecoin Core | 全节点客户端 | 从官方发布页下载对应平台二进制包 |
| jq | JSON格式化工具 | `sudo apt install jq` |
| 磁盘空间 | ≥70GB（含交易索引） | SSD推荐 |
| 内存 | ≥4GB | 8GB推荐 |
The FAQ reiterates that the free edition only provides query capabilities while other sections document address creation. Contradictory safety claims make operator review and policy enforcement unreliable, which is dangerous when the skill has exec access and wallet-adjacent functionality.
The later core-features section expands the skill into generic file handling, API integration, and broad command execution beyond the stated Dogecoin RPC purpose. That scope inflation makes the skill more dangerous because a loosely routed agent could justify unrelated filesystem or network actions under this skill's authority.
The functional summary lists '中文交互' as a core capability but does not mention alternative language support or user choice. Repeating a fixed-language framing can create an implicit locale constraint across the skill.
Advertising generic file write capability is not justified by the declared query-oriented Dogecoin-node purpose and broadens perceived authority unnecessarily. Even if not implemented directly here, such documentation can steer an agent toward risky filesystem modifications under false assumptions of legitimacy.
The skill is described elsewhere as local Dogecoin RPC tooling with no extra API keys required, yet it advertises external API integration. This inconsistency can lead agents or users to over-trust outbound network behavior and expand the skill's effective permissions beyond local node interaction.