安全决策报告
solo-mission
Legitimate AI agent skill for operating on a human-AI task marketplace with documented on-chain wallet operations. All capabilities are declared and security-warned; the critical IOC (Foundry curl|bash) is documented for a legitimate purpose.
为什么得出这个结论
1/4 个维度触发 通过
声明与实际能力
声明资源与推断能力基本一致。
阻止
隐藏执行与外联
提取到 1 个高危 IOC 或外联信号。
通过
攻击链与高危发现
没有形成明确的恶意路径。
通过
依赖与供应链卫生
依赖结构存在，但暂未看到明显高危告警。
风险分是怎么被拉高的
Shell:WRITE capability +10
Extensive shell commands (curl, cast, openssl) declared for on-chain operations. Standard for blockchain agent skills.
Credential handling +5
Uses $SOLO_AGENT_KEY and $PRIVATE_KEY env vars for on-chain transactions. Agent key persisted to workspace. Strong security warnings present.
Foundry curl|bash installation +5
Critical IOC flagged (references/wallet-setup.md:29). Documented for legitimate Ethereum dev tool installation. User action, not autonomous.
最关键的证据
低危 凭证窃取
Environment variable credential access
Skill accesses $PRIVATE_KEY and $SOLO_AGENT_KEY environment variables for blockchain transactions and API authentication.
SKILL.md:1 Use KMS-backed or hardware wallet signing instead of plaintext private key env vars. Never share private keys via chat.
低危 凭证窃取
Agent key persisted to workspace
Registration flow saves $SOLO_AGENT_KEY to .claude/settings.local.json or .env file for session persistence.
SKILL.md:90 Workspace-scope persistence is acceptable for agent keys. Avoid storing private keys in plaintext files.
低危 代码执行
Remote script installation (Foundry)
references/wallet-setup.md:29 contains 'curl -L https://foundry.paradigm.xyz | bash' for Foundry installation - documented for legitimate Ethereum development tool.
references/wallet-setup.md:29 This is an owner action, not autonomous agent execution. Documented for legitimate purpose.
声明能力 vs 实际能力
网络访问 通过
声明 READ
→ 推断 READ
SKILL.md: API calls to api.mission.projectsolo.xyz 命令执行 通过
声明 WRITE
→ 推断 WRITE
SKILL.md: curl, cast, jq, openssl commands throughout 环境变量 通过
声明 READ
→ 推断 READ
SKILL.md: $SOLO_AGENT_KEY, $PRIVATE_KEY, $WALLET_ADDRESS 文件系统 通过
声明 READ
→ 推断 READ
references/wallet-setup.md: Read wallet.enc for decryption 可疑产物与外联
严重 危险命令
curl -L https://foundry.paradigm.xyz | bash references/wallet-setup.md:29
中危 外部 URL
https://api.mission.projectsolo.xyz SKILL.md:47
中危 外部 URL
https://api.mission.projectsolo.xyz/agent/missions?limit=100&page=$PAGE SKILL.md:83
中危 外部 URL
https://api.mission.projectsolo.xyz/agent/register SKILL.md:109
中危 外部 URL
https://sepolia.base.org SKILL.md:232
中危 外部 URL
https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/confirm-funding SKILL.md:258
中危 外部 URL
https://mission.projectsolo.xyz/missions/ SKILL.md:274
中危 外部 URL
https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/cancel-params SKILL.md:391
中危 外部 URL
https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/confirm-cancel SKILL.md:400
中危 外部 URL
https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/emergency-refund-params SKILL.md:408
中危 外部 URL
https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/confirm-emergency-refund SKILL.md:417
中危 外部 URL
https://api.mission.projectsolo.xyz/agent/missions SKILL.md:476
依赖与供应链
| 包名 | 版本 | 来源 | 漏洞 | 备注 |
|---|---|---|---|---|
| curl | N/A | system | 否 | System utility for API calls and tool installation |
| jq | N/A | system | 否 | System utility for JSON parsing |
| cast | N/A | Foundry | 否 | Ethereum CLI for on-chain transactions |
| openssl | N/A | system | 否 | System utility for wallet encryption/decryption |
文件构成
7 个文件 · 1754 行
Markdown 6 个文件 · 1749 行JSON 1 个文件 · 5 行
需关注文件 · 5
SKILL.md Environment variable credential access · Agent key persisted to workspace · https://api.mission.projectsolo.xyz · https://api.mission.projectsolo.xyz/agent/missions?limit=100&page=$PAGE · https://api.mission.projectsolo.xyz/agent/register · https://sepolia.base.org · https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/confirm-funding · https://mission.projectsolo.xyz/missions/ · https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/cancel-params · https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/confirm-cancel · https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/emergency-refund-params · https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/confirm-emergency-refund · https://api.mission.projectsolo.xyz/agent/missions · https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/tracks/upload-url · https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/tracks/$TRACK_ID/confirm · https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID · https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/tracks · https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/finalize-qualification · https://api.mission.projectsolo.xyz/agent/missions/$MISSION_ID/settle
references/rest-api.md https://mission.projectsolo.xyz/missions/$MISSION_ID\
references/onchain.md 0x6537Dcb39517A30e13C246560E7F58Bb7C2Fc2b2 · 0x036CbD53842c5426634e7929541eC2318f3dCF7e
references/wallet-setup.md Remote script installation (Foundry) · curl -L https://foundry.paradigm.xyz | bash · https://foundry.paradigm.xyz · https://docs.base.org/docs/tools/network-faucets · https://faucet.circle.com
skill-card.md https://clawhub.ai/user/wj-solo · https://clawhub.ai/wj-solo/solo-mission
其他文件 · stuck-recovery.md · _meta.json
安全亮点
Comprehensive documentation of all capabilities and shell commands
Strong private key security warnings (LLM side-channel risk, never paste in chat)
KMS and hardware wallet options provided as secure alternatives
Clear separation between off-chain and on-chain mission flows
No hidden functionality - all behavior declared in SKILL.md and reference files
Session-start stuck mission scan prevents fund loss
Refund and emergency-refund procedures documented for fund recovery
Rate limits and polling schedules documented for API compliance