ClawHub
Back to skill

Security audit

tron-x402-payment-demo

Security checks across malware telemetry and agentic risk

Overview

This payment demo is mostly transparent about its goal, but it can automatically use a TRON private key for payment actions without a clear confirmation or spending boundary.

Review before installing. Use only a dedicated low-balance TRON wallet, verify the x402_payment_tron dependency and destination service, and require visible confirmation of network, amount, recipient, and signing details before any payment is allowed.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill instructs the agent to automatically perform a payment flow using a configured TRON private key and then delete the local temporary file, but it does not require any explicit user confirmation, spending limit, or warning that a financial transaction will occur. In this context, the danger is elevated because the skill metadata explicitly declares access to `TRON_PRIVATE_KEY`, so a simple trigger phrase could cause unintended blockchain spending and reduce auditability by cleaning up artifacts immediately after use.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.