NodPay

• Outcome: Pass
• Latest audit: May 29, 2026 · 8:23 PM UTC
• Version: 0.2.33

Overview

NodPay is a disclosed crypto shared-wallet skill that stores an agent signing key locally and can propose, but not unilaterally approve, on-chain payments.

Install only if you want an agent to participate in crypto payment proposal workflows. Protect `~/.nodpay/.env` like a wallet credential, verify the `nodpay` npm package/source before use, and personally review every approval link, chain, recipient, amount, and nonce before signing.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Rogue Agent: Self-Modification, Session Persistence
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration

Findings (5)

Vague Triggers

Medium

• Confidence: 86% confidence
• Finding: The activation text is broad enough to trigger on common requests like 'send crypto' or 'make a payment', which can cause the agent to invoke a high-risk wallet/payment capability in situations where the user did not explicitly intend to use this specific skill. In a financial skill, over-broad routing materially increases the chance of unintended transaction preparation and exposure of wallet-related state.

Credential Access

High

• Category: Privilege Escalation

Content

{
    "openclaw":
      {
        "requires": { "bins": ["npx", "curl"], "config": ["~/.nodpay/.env", "~/.nodpay/wallets/"] },
        "homepage": "https://nodpay.ai",
        "install": [{ "id": "node", "kind": "node", "package": "nodpay", "label": "Install NodPay CLI (npm)", "author": "xhyumiracle", "source": "https://github.com/xhyumiracle/nodpay-cli" }]
      },

• Confidence: 84% confidence
• Finding: The skill explicitly requires access to ~/.nodpay/.env, which contains the agent signing key. Even if the CLI reads the secret locally and avoids stdout/argv leakage, granting a skill access to a signing key enables real transaction proposals and creates a high-value target if the package, runtime, or surrounding agent environment is compromised.

Credential Access

High

• Category: Privilege Escalation

Content

"homepage": "https://nodpay.ai",
        "install": [{ "id": "node", "kind": "node", "package": "nodpay", "label": "Install NodPay CLI (npm)", "author": "xhyumiracle", "source": "https://github.com/xhyumiracle/nodpay-cli" }]
      },
    "credentials": "Agent signing key stored in ~/.nodpay/.env (chmod 600, generated by npx nodpay keygen). Read at runtime by CLI process; not passed via CLI args, env vars, or stdout.",
    "persistence": ["~/.nodpay/.env (agent key, chmod 600)", "~/.nodpay/wallets/*.json (wallet info, public key material)"],
    "network": ["nodpay.ai (op-store relay + wallet creation UI)", "Public RPC endpoints via --chain"]
  }

• Confidence: 91% confidence
• Finding: This line confirms the presence and purpose of the agent signing key in ~/.nodpay/.env. In the context of a cryptocurrency payment skill, compromise or unintended access to that file can let an attacker impersonate the agent signer, create fraudulent proposals, or manipulate wallet operations in combination with social engineering or another signer.

Credential Access

High

• Category: Privilege Escalation

Content

"install": [{ "id": "node", "kind": "node", "package": "nodpay", "label": "Install NodPay CLI (npm)", "author": "xhyumiracle", "source": "https://github.com/xhyumiracle/nodpay-cli" }]
      },
    "credentials": "Agent signing key stored in ~/.nodpay/.env (chmod 600, generated by npx nodpay keygen). Read at runtime by CLI process; not passed via CLI args, env vars, or stdout.",
    "persistence": ["~/.nodpay/.env (agent key, chmod 600)", "~/.nodpay/wallets/*.json (wallet info, public key material)"],
    "network": ["nodpay.ai (op-store relay + wallet creation UI)", "Public RPC endpoints via --chain"]
  }
---

• Confidence: 91% confidence
• Finding: Persisting the agent key in ~/.nodpay/.env creates durable credential exposure on disk. Because this skill is specifically designed to initiate on-chain payment proposals, the surrounding context makes secret access more dangerous than in a low-risk application: misuse can directly affect financial workflows and user trust.

Session Persistence

Medium

• Category: Rogue Agent

Content

---
name: nodpay
description: Propose on-chain payments from a shared wallet. Use when user asks to send crypto, make a payment, or create a shared wallet.
metadata:
  {
    "openclaw":

• Confidence: 76% confidence
• Finding: The skill is designed to create and maintain persistent wallet state under ~/.nodpay/, including wallet metadata and a signing key. Persistent session/state for a payments skill increases risk because stale wallet bindings, old signer metadata, or reused state may be acted on later without fresh verification, especially when activation is also broadly worded.

VirusTotal

64/64 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.