smartclaws-producer
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the
smartclawsCLI binary directly from the official GitHub releases page of the vendor (skalenetwork). - [COMMAND_EXECUTION]: Shell commands are used for platform architecture detection and to install the downloaded binary to local search paths.
- [COMMAND_EXECUTION]: The Python examples and instructions utilize
subprocess.runto interact with thesmartclawsCLI for wallet management, device registration, and data transmission. These calls use the safe list-based argument format. - [DATA_EXFILTRATION]: Sensor data collected by the scripts (such as temperature and humidity) is transmitted to remote SKALE blockchain network endpoints via the SmartClaws protocol.
- [COMMAND_EXECUTION]: Instructions are provided for the user to configure a
systemduser service to ensure the publisher scripts remain persistent across sessions. - [COMMAND_EXECUTION]: Documentation suggests using
sudo setcapas an administrative step to grant the Python interpreter specific network capabilities required for Bluetooth Low Energy (BLE) access on Linux.
Audit Metadata