ClawHub
Back to skill

Security audit

Solana Wallet Rpc

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed Solana wallet helper that can use local private keys and can submit a RockPaperClaw deposit only when explicitly executed.

Install only if you want an agent to operate a Solana wallet. Prefer a dedicated devnet keypair, explicitly set the keypair path and RPC URL, protect the keypair file, review preview output carefully, and use --execute only when you intentionally approve the exact transaction.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Rogue AgentSelf-Modification, Session Persistence
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (3)

Description-Behavior Mismatch

High
Confidence
98% confidence
Finding
The script includes a fund-moving `rockpaperclaw-deposit` path that will submit an on-chain USDC transfer when `--execute` is provided, despite the skill description saying funds should not be sent without explicit approval. In an agent setting, exposing an executable transfer primitive materially increases the risk of unauthorized asset movement if the agent is prompted, misconfigured, or tricked into running the command.

Context-Inappropriate Capability

Medium
Confidence
83% confidence
Finding
The hard-coded RockPaperClaw program ID, mint, discriminator, and custom deposit workflow introduce application-specific transaction behavior into a supposedly general-purpose wallet utility. This broadens the skill’s attack surface and makes it easier to hide or justify risky value-transfer logic inside a wallet tool that an agent may otherwise trust for routine address, balance, or signing operations.

Session Persistence

Medium
Category
Rogue Agent
Content
It can:

- create or load a local Solana wallet
- print the wallet address
- check SOL balance
- request a devnet SOL airdrop
Confidence
88% confidence
Finding
create or load a local Solana wallet - print the wallet address - check SOL balance - request a devnet SOL airdrop - sign a text message and return base58 or base64 signatures - verify a signature aga

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.