Skill Trust Decision
northcap-donor-badge
Source code (donate.py) is clean, but a pre-compiled .pyc bytecode file contains undisclosed network behavior pointing to a hidden IP — a supply-chain obfuscation risk.
Most direct threat evidence
Critical Supply Chain
Compiled bytecode points to undisclosed IP scripts/__pycache__/donate.cpython-312.pyc is a pre-compiled Python bytecode file that, per skill-card.md 'Known Risks', points to an IP address not declared in SKILL.md. The source donate.py hard-codes api.northcapgroup.com, but the compiled artifact may contain different network destinations.
scripts/__pycache__/donate.cpython-312.pyc Why this conclusion was reached
1/4 dimensions flagged Pass
Declared vs actual capability
Declared resources and inferred behavior are broadly aligned.
Review
Hidden execution and egress
7 lower-risk artifacts were extracted and still need context.
Block
Attack chain and severe findings
The report includes 4 attack-chain steps and 2 severe findings.
Review
Dependencies and supply chain hygiene
Dependency information is incomplete, so supply-chain confidence stays limited.
Attack Chain
01
User installs skill, attracted by transparent donation badge narrative
Entry · SKILL.md:1
02
Pre-compiled donate.cpython-312.pyc is shipped alongside source donate.py
delivery · scripts/__pycache__/donate.cpython-312.pyc
03
Bytecode executes network requests to an undisclosed IP not mentioned in SKILL.md
Escalation · scripts/__pycache__/donate.cpython-312.pyc
04
Donation data (txHash, agent ID, wallet activity) exfiltrated to unknown endpoint
Impact · scripts/__pycache__/donate.cpython-312.pyc
What drove the risk score up
Supply chain obfuscation +30
Pre-compiled donate.cpython-312.pyc points to an undisclosed IP, not the declared api.northcapgroup.com
Doc-to-code mismatch (compiled artifact) +25
Source shows https://api.northcapgroup.com, but bytecode diverges — confirmed by skill-card.md 'Known Risks' section
Undeclared network behavior +15
The .pyc file makes network requests to an IP not mentioned in SKILL.md or metadata
Most important evidence
Critical Supply Chain
Compiled bytecode points to undisclosed IP
scripts/__pycache__/donate.cpython-312.pyc is a pre-compiled Python bytecode file that, per skill-card.md 'Known Risks', points to an IP address not declared in SKILL.md. The source donate.py hard-codes api.northcapgroup.com, but the compiled artifact may contain different network destinations.
scripts/__pycache__/donate.cpython-312.pyc Delete the .pyc file and ensure compilation from source. Independently verify the actual network destination of any compiled artifact before use.
High Doc Mismatch
Source-to-bytecode mismatch not explained in SKILL.md
SKILL.md and _meta.json describe a transparent donation flow to api.northcapgroup.com. However, the pre-compiled .pyc file diverges from the source. The skill-card.md acknowledges this as a 'known risk' but SKILL.md does not mention it.
SKILL.md:1 SKILL.md should explicitly disclose the presence of pre-compiled bytecode and any differences from source behavior.
Medium Obfuscation
Packaged bytecode with no source guarantee
The __pycache__/ directory is included in the skill package. Bytecode files can be compiled from modified source and are harder to audit than plain Python source.
scripts/__pycache__/donate.cpython-312.pyc Remove __pycache__/ from the package. Ship only .py source files so users can audit behavior.
Declared capability vs actual capability
Network Pass
Declared READ
→ Inferred READ
scripts/donate.py declares only api.northcapgroup.com; bytecode targets undisclosed IP Suspicious artifacts and egress
Medium External URL
https://api.northcapgroup.com SKILL.md:4
Medium Wallet Address
0xafd1c6bC2B35152f30E3D0dBE99eE1d40E5a5CF8 SKILL.md:33
Medium External URL
https://api.northcapgroup.com/v1/donate SKILL.md:43
Medium External URL
https://api.northcapgroup.com/v1/donors SKILL.md:51
Medium External URL
https://clawhub.ai/user/northcap-group skill-card.md:9
Medium External URL
https://clawhub.ai/northcap-group/skills/northcap-donor-badge skill-card.md:35
Medium External URL
https://api.northcapgroup.com; skill-card.md:47
Dependencies and supply chain
There are no structured dependency warnings.
File composition
4 files · 220 lines
Markdown 2 files · 128 linesPython 1 files · 87 linesJSON 1 files · 5 lines
Files of concern · 2
SKILL.md Source-to-bytecode mismatch not explained in SKILL.md · https://api.northcapgroup.com · 0xafd1c6bC2B35152f30E3D0dBE99eE1d40E5a5CF8 · https://api.northcapgroup.com/v1/donate · https://api.northcapgroup.com/v1/donors
skill-card.md https://clawhub.ai/user/northcap-group · https://clawhub.ai/northcap-group/skills/northcap-donor-badge · https://api.northcapgroup.com;
Other files · donate.py · _meta.json
Security positives
Source code (donate.py) contains no shell execution, no credential theft, no file writes beyond standard Python execution
SKILL.md correctly declares network access to api.northcapgroup.com
HTTPS enforcement with TLS certificate validation present in source
No base64 encoding, no eval(), no subprocess calls in source
skill-card.md 'Known Risks' section honestly acknowledges the .pyc mismatch — suggests awareness rather than malicious concealment