ClawHub
Back to skill

Security audit

Solana Wallet Rpc

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed Solana wallet helper that can use local private keys and can submit a RockPaperClaw deposit only when explicitly executed.

Install only if you want an agent to operate a Solana wallet. Prefer a dedicated devnet keypair, explicitly set the keypair path and RPC URL, protect the keypair file, review preview output carefully, and use --execute only when you intentionally approve the exact transaction.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Rogue AgentSelf-Modification, Session Persistence
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (3)

Description-Behavior Mismatch

High
Confidence
98% confidence
Finding
The script includes a fund-moving `rockpaperclaw-deposit` path that will submit an on-chain USDC transfer when `--execute` is provided, despite the skill description saying funds should not be sent without explicit approval. In an agent setting, exposing an executable transfer primitive materially increases the risk of unauthorized asset movement if the agent is prompted, misconfigured, or tricked into running the command.

Context-Inappropriate Capability

Medium
Confidence
83% confidence
Finding
The hard-coded RockPaperClaw program ID, mint, discriminator, and custom deposit workflow introduce application-specific transaction behavior into a supposedly general-purpose wallet utility. This broadens the skill’s attack surface and makes it easier to hide or justify risky value-transfer logic inside a wallet tool that an agent may otherwise trust for routine address, balance, or signing operations.

Session Persistence

Medium
Category
Rogue Agent
Content
It can:

- create or load a local Solana wallet
- print the wallet address
- check SOL balance
- request a devnet SOL airdrop
Confidence
88% confidence
Finding
The skill explicitly creates, loads, and uses persistent local Solana keypair files, which introduces session persistence through long-lived credentials on disk. In an agent setting, persisted wallet material can be reused across tasks or by other processes, increasing the risk of unintended signing, wallet correlation, or key theft if filesystem protections are weak or the path is auto-discovered.

Static analysis

No suspicious patterns detected.