Is adacapo21/cardano-staking safe?
Yes. adacapo21/cardano-staking is safe to install. Oathe's behavioral security audit gave the cardano-staking skill by adacapo21 a trust score of 87/100 with 3 findings (1 high).
https://clawhub.ai/adacapo21/cardano-staking
Is adacapo21/cardano-staking safe to install?
This Cardano staking skill appears to be a legitimate utility for checking delegation status and rewards, with clean code and no malicious behavior detected. However, it requires access to the user's seed phrase, which provides complete control over their cryptocurrency wallet and creates significant financial risk.
What security issues were found in adacapo21/cardano-staking?
Category Scores
Findings (3)
HIGH Requires Cryptocurrency Seed Phrase Access -30 ▶
The skill requires access to SEED_PHRASE environment variable, which provides complete control over the user's cryptocurrency wallet. This creates significant financial risk as seed phrases can be used to transfer all funds.
MEDIUM High-Value Target for Attack Chains -40 ▶
While the skill itself appears benign, its access to seed phrases makes it a valuable target for attack chains with other skills that have network capabilities. An attacker could potentially combine this with network-enabled skills to exfiltrate wallet credentials.
LOW External Network Connections During Install -15 ▶
The skill installation process made connections to external hosts, which is normal for downloading from the ClawHub registry but represents potential attack surface.
Should I install adacapo21/cardano-staking?
Oathe's verdict for adacapo21/cardano-staking is SAFE with a trust score of 87/100. Recommendation: Install with caution.