ClawHub
Back to skill

Security audit

Nadfun Skill

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent blockchain integration guide, but users should handle wallet private keys and session cookies as sensitive secrets.

Install only if you intend to let the agent help with NadFun/Monad integration. Use testnet or a low-value wallet first, keep `PRIVATE_KEY` and session cookies in secure secret storage, never paste them into shared chats or logs, and manually review any transaction or API-key operation before execution.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The guide demonstrates loading a private key directly from an environment variable and immediately constructing a signing account, but it provides no warning that this is highly sensitive credential material. In an agent-skill context, users may copy this pattern into shared, logged, or insufficiently isolated environments, which can lead to wallet compromise and irreversible loss of funds if the key is exposed.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The example reads the session cookie from the Set-Cookie header and reuses it directly for authenticated API requests, but it does not warn that this cookie is bearer-style authentication material. In agent or automation environments, such cookies may be logged, stored in traces, or forwarded across tool boundaries, allowing unauthorized API key management if intercepted.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.