Trust Assessment
clawsea-market received a trust score of 72/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 1 finding: 1 critical, 0 high, 0 medium, and 0 low severity. Key findings include Skill requires direct access to BOT_WALLET_PRIVATE_KEY.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Skill requires direct access to BOT_WALLET_PRIVATE_KEY The skill explicitly states that `BOT_WALLET_PRIVATE_KEY` is a required environment variable for autonomous trading. This grants the skill direct, unconstrained access to the bot's wallet private key, enabling it to sign arbitrary messages and transactions. While the documentation advises storing it as a secret, the necessity of exposing this highly sensitive credential to the skill's runtime environment represents a critical security risk. Compromise of the skill or its execution environment would lead to full control over the associated cryptocurrency wallet. Re-evaluate the necessity of direct private key access. Consider alternative architectures such as using a secure signing service, a hardware security module (HSM), or a multi-party computation (MPC) wallet solution that allows transaction approval without exposing the raw private key to the skill's runtime environment. If direct access is unavoidable, ensure the execution environment is highly isolated, ephemeral, and subject to stringent access controls and monitoring. | LLM | SKILL.md:16 |
Scan History
Embed Code
[](https://skillshield.io/report/997248bcba985963)
Powered by SkillShield