Caveat verdict
torch-domain-auction-bot
torchdomainauctionbot
Accesses credentials AND encodes data
This skill optionally consumes SOLANA_PRIVATE_KEY and executes real financial operations on Solana (token creation, vault funding, domain collateral, borrowing SOL) where liquidation results in permanent loss of assets, representing elevated financial risk even though the skill includes transparency notes.
Automated static analysis — not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
What it does
These are capability combinations: each listed behavior occurs in the skill, but Caveat detects co-occurrence — it does not verify that one flows into another. Read the code to confirm a live chain.
Accesses credentials AND encodes data — may obfuscate stolen credentials
LLM02 · ASI03 · ASI04
Permission integrity
package_install
Findings (4)
Uses eval() — can execute arbitrary code
audit.md · prose · downgraded · eval(
Accesses process.env — reads environment variables
SKILL.md · code
Accesses sensitive environment variables
audit.md · code · process.env.SOLANA_PRIVATE_KEY
Uses exec() — may execute shell commands
lib/kit/scraper/providers/expired-domains.js · prose · downgraded · exec(
Why the tier is capped
Execution sink present in raw bytes (Hard Floor: class B). Final tier capped at Caution — cannot be lifted by any downgrade, example-payload opt-in, or allowlist.
Permissions & capabilities
Requires 3 environment variables. (1 sensitive: name: SOLANA_PRIVATE_KEY).
package_installcredential_accessdata_encoding Thanks — recorded.