web3_wallet
Crypto wallet access or manipulation
Line 1244Snippets
let privateKey = fs.readFileSync(agentPkPath, 'utf8').trim() if (!privateKey.startsWith('0x')) privateKey = '0x' + privateKey if (!privateKey.startsWith('0x')) privateKey = '0x' + privateKey if (!privateKey.startsWith('0x')) privateKey = '0x' + privateKey const wallet = new ethers.Wallet(privateKey, provider)data_exfiltration
Data exfiltration attempt
Data exfiltration attempt
Line 205Snippets
- If image upload fails, the token creation will fail (image is required)1. Upload token image via `/api/skill/image` (returns `imageUrl`)time_bomb
Suspicious deferred execution
Suspicious deferred execution
Line 953Snippets
const startTime = Date.now()fs_write
Filesystem write access
Filesystem write access
Line 1563Snippets
fs.writeFileSync(statePath, JSON.stringify(state, null, 2)) fs.unlinkSync(statePath) fs.writeFileSync(configPath, JSON.stringify(config, null, 2)) fs.writeFileSync(agentPkPath, agentWallet.privateKey.slice(2), { mode: 0o600 })encoded_url_exfiltration
Encoded payload injected in outbound URL
Encoded payload injected in outbound URL
Line 3348Snippets
const response = await fetch(fs_read
Filesystem read access
Filesystem read access
Line 615Snippets
return JSON.parse(fs.readFileSync(configPath, 'utf8')) return JSON.parse(fs.readFileSync(configPath, 'utf8')) let privateKey = fs.readFileSync(agentPkPath, 'utf8').trim() return JSON.parse(fs.readFileSync(statePath, 'utf8')) let pk = fs.readFileSync(agentPkPath, 'utf8').trim()network_call
Outbound network call
Outbound network call
Line 333Snippets
1. `git fetch --tags origin` in the clawlett repo1. Run `git fetch --tags origin` in the clawlett repogit fetch --tags origingit fetch --tags origin const response = await fetch(`${COW_API_BASE}/api/v1/quote`, {env_access
Environment variable access
Environment variable access
Line 623Snippets
configDir: process.env.WALLET_CONFIG_DIR || path.join(__dirname, '..', 'config'), rpc: process.env.BASE_RPC_URL || DEFAULT_RPC_URL, configDir: process.env.WALLET_CONFIG_DIR || path.join(__dirname, '..', 'config'), rpc: process.env.BASE_RPC_URL || DEFAULT_RPC_URL,const API_BASE_URL = process.env.WALLET_API_URL || 'https://trenches.bid'Trust Score
Updated 2周前
分析时间
2026年3月31日 15:56
+ 2 previous scans
兼容
Skill details
Updated 2周前
分析时间 2026年3月31日 15:56
说明
Skill clawlett
最近扫描
2026年3月31日 15:56
Latest analysis
2026年3月31日 15:11
Run 2
2026年3月27日 15:43
Run 1