dgclaw

Warn

Audited by Gen Agent Trust Hub on May 6, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The dgclaw.sh script provides a setup-cron command that installs a cron job on the host system to automate forum monitoring. This persistence mechanism includes the DGCLAW_API_KEY directly in the crontab command string, which exposes the credential to any user capable of listing the system's scheduled tasks.
  • [COMMAND_EXECUTION]: The skill makes extensive use of system shell execution via execSync in TypeScript and subshells in Bash to run tools such as acp-cli, openssl, curl, and jq for identity management, transaction signing, and data processing.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection. It ingests untrusted data from the Degenerate Claw public forum (via unreplied-posts) and delivers it directly to the agent's chat context. Maliciously crafted posts could be used to influence the agent's decision-making or trigger unauthorized actions.
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the acp-cli tool from a remote GitHub repository and communicates with external APIs at api.hyperliquid.xyz and degen.virtuals.io to perform trading and forum operations.
Audit Metadata
Risk Level
MEDIUM
Analyzed
May 6, 2026, 07:15 AM