Skip to content
← Registry
Trust Report

autobahn

Operate autonomous onchain-governed entities via agents: identity, governance, contracts, and registry/community workflows.

33
REJECTED
Format: openclawScanner: v0.7.1Duration: 95msScanned: 7d ago · Apr 1, 2:47 PMSource →
Embed this badge
AgentVerus REJECTED 33AgentVerus REJECTED 33AgentVerus REJECTED 33
[![AgentVerus](https://agentverus.ai/api/v1/skill/1d01d102-5794-4b3d-bf56-1781e00007f4/badge)](https://agentverus.ai/skill/1d01d102-5794-4b3d-bf56-1781e00007f4)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/1d01d102-5794-4b3d-bf56-1781e00007f4/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"1d01d102-5794-4b3d-bf56-1781e00007f4","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/1d01d102-5794-4b3d-bf56-1781e00007f4/trust

Category Scores

31
Permissions
100
Injection
23
Dependencies
30
Behavioral
55
Content
100
Code Safety

Findings (18)

criticalSecurity bypass instructions-40

The skill contains instructions related to: security bypass instructions.

Bypass Protection

Remove all harmful content instructions. Skills must not enable dangerous activities.

contentASST-07
highCapability contract mismatch: inferred credential access is not declared-15

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: get an unsigned UserOp and hash, (2) signs the hash locally with the agent's private key from `secrets

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-05
highCapability contract mismatch: inferred command execution is not declared-12

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: exec

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
highCapability contract mismatch: inferred network access is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: https://autobahn.surf

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-04
highCapability contract mismatch: inferred local service access is not declared-10

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: http://localhost:8080

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
highCapability contract mismatch: inferred payment processing is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: payments

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
highLocal file access detected (inside code block)-15

Found local file access pattern: "scripts/install.sh"

> The `autobahn` CLI must be installed before use. Run `scripts/install.sh` to download the correct binary. See "CLI Installation" above.

Treat local file browsing as privileged access. Restrict it to explicit user-approved paths and avoid combining it with unrestricted browser/session reuse.

behavioralASST-03
highMany external URLs referenced (10)-8

The skill references 10 external URLs and also discusses auth/API/payment workflows, which increases the chance that sensitive operations depend on many remote endpoints.

URLs: https://autobahn.surf, https://example.com/proposal-description, https://api.autobahn.surf, https://mainnet.base.org, https://mainnet.base.org`...

Minimize external dependencies to reduce supply chain risk.

dependenciesASST-04
highFinancial/payment actions detected-15

Found financial/payment actions pattern: "wallet" Related auth/profile context: - auth/session capability-contract context — Capability contract mismatch: inferred cookie URL handoff is not declared

Most other operations — entity formation, document generation, lending, and litigation — work through the API server's deployer key. Your agent wallet is used for authentication (EIP-712 challenge-res

Financial actions should always require explicit user confirmation and should be clearly documented.

behavioralASST-09
highLocal service URL reference-8

The skill references a localhost or private-network service URL which is classified as high risk. Merged overlapping signals from the repeated finding family: - Local service URL reference

http://localhost:8080

Review localhost/private-network service references carefully. Local service URLs can expose internal apps, admin panels, or developer tooling to agent-driven workflows.

dependenciesASST-04
highUnrestricted scope detected-20

Found unrestricted scope pattern: "Full access"

| **Lending** | Full access | Full access | Full access (with mandatory lender warnings) |

Define clear boundaries for what the skill can and cannot do. Unrestricted scope is a security risk.

behavioralASST-09
highLocal service access detected (inside code block)-15

Found local service access pattern: "http://localhost:8080"

autobahn config init --api-url http://localhost:8080 --chain-id 31337 --rpc-url http://localhost:8545

Treat localhost and loopback services as privileged local attack surfaces. Require explicit approval, constrain reachable ports, and avoid combining local access with session reuse or tunneling.

behavioralASST-03
mediumCapability contract mismatch: inferred file write is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: Write the JSON to a temporary file

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCredential in query string detected (inside code block)-5

Found credential in query string pattern: "?token=<JWT>"

wss://api.autobahn.surf/v1/ws?token=<JWT>

Do not pass auth cookies or tokens in URLs. Query strings leak into browser history, logs, analytics, and referrers. Use secure headers or an explicit browser cookie API instead.

behavioralASST-05
mediumUnknown external reference-8

The skill references an unknown external domain which is classified as medium risk. Merged overlapping signals from the repeated finding family: - Unknown external reference

https://api.autobahn.surf

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference-5

The skill references an unknown external domain which is classified as low risk.

https://autobahn.surf

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
infoSafety boundaries defined

The skill includes explicit safety boundaries defining what it should NOT do.

Safety boundary patterns detected in content

Keep these safety boundaries. They improve trust.

contentASST-09
infoOutput constraints defined

The skill includes output format constraints (length limits, format specifications).

Output constraint patterns detected

Keep these output constraints.

contentASST-09