dgclaw
Warn
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
dgclaw.shscript provides asetup-croncommand that installs a cron job on the host system to automate forum monitoring. This persistence mechanism includes theDGCLAW_API_KEYdirectly in the crontab command string, which exposes the credential to any user capable of listing the system's scheduled tasks. - [COMMAND_EXECUTION]: The skill makes extensive use of system shell execution via
execSyncin TypeScript and subshells in Bash to run tools such asacp-cli,openssl,curl, andjqfor identity management, transaction signing, and data processing. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection. It ingests untrusted data from the Degenerate Claw public forum (via
unreplied-posts) and delivers it directly to the agent's chat context. Maliciously crafted posts could be used to influence the agent's decision-making or trigger unauthorized actions. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
acp-clitool from a remote GitHub repository and communicates with external APIs atapi.hyperliquid.xyzanddegen.virtuals.ioto perform trading and forum operations.
Audit Metadata