Security audit

Agent Wallet

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed wallet bridge, but it exposes broad mainnet funds-moving and autonomous-permission tools that users should review carefully before installing.

Install only if you intend to let this agent operate real wallets. Keep signer secrets out of plugin config, verify the external Agent Wallet runtime source, avoid enabling autonomous approval unless you understand that it applies broadly until revoked, and test first with minimal funds.

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

Detected: suspicious.dangerous_exec

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: dist/index.js:387
Evidence: const stdout = execFileSync(

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: index.ts:387
Evidence: const stdout = execFileSync(