ClawHub
Back to skill

Security audit

token-profiler

Security checks across malware telemetry and agentic risk

Overview

This skill is a small, disclosed token lookup helper that sends token addresses to a public VerdictSwarm API and does not install code, persist data, or request credentials.

Before installing, be aware that token addresses and selected chains you look up will be sent to VerdictSwarm's API and may be associated with normal request metadata such as client IP for rate limiting. Avoid submitting confidential internal identifiers if that disclosure is a concern.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Low
Confidence
93% confidence
Finding
The skill instructs the agent to send user-supplied token addresses to an external API, but it does not explicitly warn that this input and the caller's IP address will be transmitted to a third party. While the data is not highly sensitive in most cases, the omission can create a privacy leak and reduce informed consent, especially in enterprise or regulated environments.

External Transmission

Medium
Category
Data Exfiltration
Content
## Contract

- Endpoint: `GET https://api.vswarm.io/v1/token`
- Supported chains: `solana`, `base`
- Free limit: 100 lookups per day per client IP
- Authentication: none
Confidence
86% confidence
Finding
This skill is explicitly designed to call an external service at api.vswarm.io, which means user-provided inputs are transmitted outside the local trust boundary. In context, this is expected functionality rather than covert exfiltration, but it still constitutes a real external data transmission risk if users are not aware of it or if sensitive inputs are supplied.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.