Skill Trust Decision
solo-mission
Legitimate AI agent skill for operating on a human-AI task marketplace with documented on-chain wallet operations. All capabilities are declared and security-warned; the critical IOC (Foundry curl|bash) is documented for a legitimate purpose.
Why this conclusion was reached
1/4 dimensions flagged Pass
Declared vs actual capability
Declared resources and inferred behavior are broadly aligned.
Block
Hidden execution and egress
1 high-risk artifacts or egress signals were extracted.
Pass
Attack chain and severe findings
There is no explicit malicious chain in the report.
Pass
Dependencies and supply chain hygiene
Dependencies are present but no obvious high-risk issue stands out.
What drove the risk score up
Shell:WRITE capability +10
Extensive shell commands (curl, cast, openssl) declared for on-chain operations. Standard for blockchain agent skills.
Credential handling +5
Uses $SOLO_AGENT_KEY and $PRIVATE_KEY env vars for on-chain transactions. Agent key persisted to workspace. Strong security warnings present.
Foundry curl|bash installation +5
Critical IOC flagged (references/wallet-setup.md:29). Documented for legitimate Ethereum dev tool installation. User action, not autonomous.
Most important evidence
Low Credential Theft
Environment variable credential access
Skill accesses $PRIVATE_KEY and $SOLO_AGENT_KEY environment variables for blockchain transactions and API authentication.
SKILL.md:1 Use KMS-backed or hardware wallet signing instead of plaintext private key env vars. Never share private keys via chat.
Low Credential Theft
Agent key persisted to workspace
Registration flow saves $SOLO_AGENT_KEY to .claude/settings.local.json or .env file for session persistence.
SKILL.md:90 Workspace-scope persistence is acceptable for agent keys. Avoid storing private keys in plaintext files.
Low RCE
Remote script installation (Foundry)
references/wallet-setup.md:29 contains 'curl -L https://foundry.paradigm.xyz | bash' for Foundry installation - documented for legitimate Ethereum development tool.
references/wallet-setup.md:29 This is an owner action, not autonomous agent execution. Documented for legitimate purpose.
Declared capability vs actual capability
Network Pass
Declared READ
→ Inferred READ
SKILL.md: API calls to api.mission.projectsolo.xyz Shell Pass
Declared WRITE
→ Inferred WRITE
SKILL.md: curl, cast, jq, openssl commands throughout Environment Pass
Declared READ
→ Inferred READ
SKILL.md: $SOLO_AGENT_KEY, $PRIVATE_KEY, $WALLET_ADDRESS Filesystem Pass
Declared READ
→ Inferred READ
references/wallet-setup.md: Read wallet.enc for decryption Suspicious artifacts and egress
Critical Dangerous Command
curl -L https://foundry.paradigm.xyz | bash references/wallet-setup.md:29
Medium External URL
https://api.mission.projectsolo.xyz SKILL.md:47
Medium External URL
https://api.mission.projectsolo.xyz/agent/missions?limit=100&page=$PAGE SKILL.md:83
Medium External URL
https://api.mission.projectsolo.xyz/agent/register SKILL.md:109
Medium External URL
https://sepolia.base.org SKILL.md:232
Medium External URL
https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/confirm-funding SKILL.md:258
Medium External URL
https://mission.projectsolo.xyz/missions/ SKILL.md:274
Medium External URL
https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/cancel-params SKILL.md:391
Medium External URL
https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/confirm-cancel SKILL.md:400
Medium External URL
https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/emergency-refund-params SKILL.md:408
Medium External URL
https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/confirm-emergency-refund SKILL.md:417
Medium External URL
https://api.mission.projectsolo.xyz/agent/missions SKILL.md:476
Dependencies and supply chain
| Package | Version | Source | Known vuln | Notes |
|---|---|---|---|---|
| curl | N/A | system | No | System utility for API calls and tool installation |
| jq | N/A | system | No | System utility for JSON parsing |
| cast | N/A | Foundry | No | Ethereum CLI for on-chain transactions |
| openssl | N/A | system | No | System utility for wallet encryption/decryption |
File composition
7 files · 1754 lines
Markdown 6 files · 1749 linesJSON 1 files · 5 lines
Files of concern · 5
SKILL.md Environment variable credential access · Agent key persisted to workspace · https://api.mission.projectsolo.xyz · https://api.mission.projectsolo.xyz/agent/missions?limit=100&page=$PAGE · https://api.mission.projectsolo.xyz/agent/register · https://sepolia.base.org · https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/confirm-funding · https://mission.projectsolo.xyz/missions/ · https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/cancel-params · https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/confirm-cancel · https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/emergency-refund-params · https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/confirm-emergency-refund · https://api.mission.projectsolo.xyz/agent/missions · https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/tracks/upload-url · https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/tracks/$TRACK_ID/confirm · https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID · https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/tracks · https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/finalize-qualification · https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/settle
references/rest-api.md https://mission.projectsolo.xyz/missions/$MISSION_ID\
references/onchain.md 0x6537Dcb39517A30e13C246560E7F58Bb7C2Fc2b2 · 0x036CbD53842c5426634e7929541eC2318f3dCF7e
references/wallet-setup.md Remote script installation (Foundry) · curl -L https://foundry.paradigm.xyz | bash · https://foundry.paradigm.xyz · https://docs.base.org/docs/tools/network-faucets · https://faucet.circle.com
skill-card.md https://clawhub.ai/user/wj-solo · https://clawhub.ai/wj-solo/solo-mission
Other files · stuck-recovery.md · _meta.json
Security positives
Comprehensive documentation of all capabilities and shell commands
Strong private key security warnings (LLM side-channel risk, never paste in chat)
KMS and hardware wallet options provided as secure alternatives
Clear separation between off-chain and on-chain mission flows
No hidden functionality - all behavior declared in SKILL.md and reference files
Session-start stuck mission scan prevents fund loss
Refund and emergency-refund procedures documented for fund recovery
Rate limits and polling schedules documented for API compliance