ClawHub
Back to skill

Security audit

Lpxpoly

Security checks for vulnerabilities and agentic risk

Overview

The skill’s purpose is coherent, but it asks users to run an unpinned remote npm MCP server that receives a Lightning spending token.

Review this before installing. Use only a dedicated, revocable LightningProx token with low balance and spending limits, pin the MCP package to a reviewed exact version if possible, and run it with minimal filesystem and environment access. Treat the market outputs as analysis, not financial advice.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T08 · Insecure Dependencies

Warning
Location
SKILL.md:108
Finding

Unpinned npm Package Executes with Access to a Lightning Spending Token

Content
View full analysis
Remediation
View remediation
"] ``` 2. Record and verify the package's cryptographic integrity through an npm lockfile or an equivalent trusted artifact-verification mechanism. 3. Install the package as a separate, explicit deployment step after reviewing its source, release provenance, dependencies, and lifecycle scripts. Avoid downloading executable code automatically when the MCP server starts. 4. Publish or reference reproducible source code and signed release artifacts so users can verify that the distributed package corresponds to the reviewed implementation. 5. Use a dedicated, revocable Lightning token with: - A low maximum balance. - Per-request and cumulative spending limits. - Restricted API scope. - Short expiration. - Monitoring and rapid revocation support. 6. Run the MCP server in a least-privilege sandbox or container. Restrict filesystem access, inherited environment variables, operating-system capabilities, and outbound network destinations to those strictly required. 7. Pass only the required token into the process. Do not allow the MCP server to inherit unrelated secrets from the parent agent environment. 8. Monitor package-version changes and payment activity, and require renewed security review before upgrading the pinned dependency. ]]>

SkillSpector

Vulnerability Patterns
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

YARA rule 'ransomware_behavior': Ransomware-like patterns (mass encryption, ransom notes) [malware]

Critical
Category
YARA Match
Confidence
80% confidence
Finding

YARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).

Content

Scanner excerpt · SKILL.md (reported line 16)May include surrounding context.

mispriced markets, get AI edge on probability vs market price. ~50 sats per analysis. acceptLicenseTerms: true metadata: clawdbot: emoji: "📊" homepage: https://lpxpoly.com requires: env: - LIGHTNINGPROX_SPEND_TOKEN

LPXPoly — AI-Powered Polymarket Analysis

Find edge in prediction markets using AI probability estimation vs current market prices. Pay ~50 sats per analysis via Bitcoin Lightning. No subscription, no account.

When to Use

  • Finding mispriced markets on Polymarket
  • Getting AI probability assessment on specific events
  • Scanning for arbitrage opportunities in prediction markets
  • Comparing AI model probability vs crowd wisdom
  • Browsing top markets by volume or category

Tools

get_edge_opportunities

Scans Polymarket for markets where AI probability significantly diverges from market price.

text
"Find edge opportunities on Polymarket"
→ Returns top mispriced markets with AI vs market probabi

Static analysis

No suspicious patterns detected.