Caveat verdict
clawrtc
Installs a pip package that runs a persistent background hardware attestation/mining service accumulating RTC tokens in a wallet, and optionally integrates Coinbase CDP credentials for token swaps — this is a resource-consuming financial operation beyond normal skill scope.
⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis — not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Permission integrity
package_install
Findings (9)
subprocess execution — runs system commands from Python
clawrtc/cli.py · prose · downgraded · subprocess.run(
subprocess with shell=True — command injection vector
clawrtc/cli.py · prose · downgraded · subprocess.run(
cmd, shell=True
Instructs covert action — may act without user awareness
clawrtc/cli.py · prose · downgraded · silently
os.system/popen — direct OS command execution
clawrtc/cli.py · prose · downgraded · os.execvp(
HTTP request to bare IP address — common in malicious payloads
clawrtc/data/fingerprint_checks.py · prose · downgraded · http://169.254.169.254
Long base64 string (100+ chars) — likely obfuscated payload
README.md · prose · downgraded · PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCAyNCAyNCIg
Python urllib.request — network access
clawrtc/cli.py · prose · downgraded · urllib.request
Python shutil file operation — copies/moves/deletes files
clawrtc/cli.py · prose · downgraded · shutil.rmtree(
Python os.environ.get — reads environment variable
clawrtc/cli.py · prose · downgraded · os.environ.get(
Why the tier is capped
Execution sink present in raw bytes (Hard Floor: class D). Final tier capped at Caution — cannot be lifted by any downgrade, example-payload opt-in, or allowlist.
Permissions & capabilities
No declared permissions — minimal attack surface.
package_install Is this flag fair?
Thanks — recorded.