Caveat verdict
moltguild
Accesses credentials AND makes external network calls
The TL;DR section explicitly shows generating a Solana keypair and printing the secret key in plaintext (hex), then using it for real USDC transactions on Solana mainnet with escrow contracts.
Automated static analysis — not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
What it does
These are capability combinations: each listed behavior occurs in the skill, but Caveat detects co-occurrence — it does not verify that one flows into another. Read the code to confirm a live chain.
Accesses credentials AND makes external network calls — potential credential theft
LLM02 · ASI03
Accesses credentials AND encodes data — may obfuscate stolen credentials
LLM02 · ASI03 · ASI04
Permission integrity
network_out
credential_access
Findings (4)
Instruction-prose smuggling shape detected: collects a sensitive target ("API key") and emits it outward ("POST"). Phrased as prose with no trigger tokens — a semantic prompt-injection / data-exfil pattern the syntactic scanners can't see. Final tier capped at Caution; review the instructions before installing.
SKILL.md · | Method | Endpoint | Description | |--------|----------|-------------| | POST | `/api/jobs` | Post bounty (x402 escrow — see above) | | POST | `/api/jobs/:id/c
References webhook/callback URL
SKILL.md · code · webhook_url
Data encoding/decoding
SKILL.md · code
Popular HTTP library — network access
SKILL.md · prose · downgraded · Got
Permissions & capabilities
No declared permissions — minimal attack surface.
credential_accessdata_encodingnetwork_outnetwork_in Thanks — recorded.