Security audit

Ponzu Launchpad

Security checks for vulnerabilities and agentic risk

Overview

This skill is coherent for Ethereum launchpad work, but it asks users to use wallet-signing authority with unsafe transaction examples and unpinned external package execution that deserve review before installation.

Review this skill carefully before installing or using it with real funds. Use a dedicated low-value wallet, test on Sepolia first, pin and audit npm/MCP package versions, avoid giving a raw private key to an unpinned MCP process, explicitly set and validate your RPC URL, and replace every zero minimum-output transaction example with a quote-based slippage limit before signing.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (3)

T08 · Insecure Dependencies

Error

Location: SKILL.md:69
Finding: Unpinned Third-Party Packages Can Execute with Wallet-Signing Access
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Error

Location: SKILL.md:331
Finding: Transaction Examples Disable Slippage Protection
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:79
Finding: Configured RPC Endpoint Is Ignored by Wallet and Public Client Examples
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 276)May include surrounding context.
Option A — IPFS via Pinata (recommended):

typescript
// POST image file to https://api.pinata.cloud/pinning/pinFileToIPFS // POST metadata JSON to https://api.pinata.cloud/pinning/pinJSONToIPFS // Headers: { Authorization: 'Bearer YOUR_PINATA_JWT' }

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 277)May include surrounding context.
Option A — IPFS via Pinata (recommended):

typescript
// POST image file to https://api.pinata.cloud/pinning/pinFileToIPFS // POST metadata JSON to https://api.pinata.cloud/pinning/pinJSONToIPFS // Headers: { Authorization: 'Bearer YOUR_PINATA_JWT' }

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The swap examples set amountOutMin/minOut to 0n, which disables effective slippage protection and can expose users to severe price movement, MEV sandwiching, or unexpectedly poor execution. In a trading/deployment skill that encourages real mainnet interaction, presenting unsafe defaults without a strong inline warning materially increases loss risk.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.