📦

Audit History

web3-data - 3 audits

Version comparison

Capability and finding changes across audited versions, newest first.

Version	Date	Result	Review items	Change vs previous
v3 Latest	Aug 7, 2026, 09:15 AM	1 confirmed	0	No capability change
v2	Jul 20, 2026, 03:33 AM	1 confirmed	2	No capability change
v1	Jul 10, 2026, 12:29 AM	1 confirmed	41	Baseline

Audit version 3 Latest

Aug 7, 2026, 09:15 AM

All 96 static matches are false positives because they identify documentation links, API reference tables, environment-variable configuration, or literal CLI examples. The skill does describe an optional x402 private-key payment flow, which is a medium-risk financial side effect that requires explicit user approval and controlled credentials.

Files scanned

853

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Medium

SKILL.md:28

Payment-Capable CLI Workflow

SKILL.md documents the --x402 option and asks the user to configure a private key for pay-per-call micropayments. This creates a financial side effect that should require explicit approval.

The cited line explicitly describes x402 micropayments and private-key setup. The documentation does not show unauthorized payment behavior, so the finding is limited to confirmation and fund-management risk.

Risk Factors

🔑 Env variables (3)

CLAUDE.md:20 README.md:65 SKILL.md:26

🌐 Network access (9)

clawhub.json:10 clawhub.json:11 README.md:40 references/tops-api.md:43 references/tops-api.md:102 SKILL.md:20 SKILL.md:26 SKILL.md:135 SKILL.md:136

⚙️ External commands (50)

Audited by: codex

Audit version 2

Jul 20, 2026, 03:33 AM

Most static alerts are false positives from Markdown links, API reference tables, and documented CLI examples rather than executable skill code. Two documented actions remain material risks: global installation of a third-party npm CLI and configuration of a private key for x402 payments. No prompt-injection text or data-exfiltration intent was found.

Files scanned

813

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

High

SKILL.md:28

Private Key Configuration for Payments

The x402 setup asks users to configure a private key in the Chainbase CLI. This can expose a wallet credential or authorize paid requests if the CLI, its storage, or the endpoint is compromised.

The documented command explicitly configures a private key for micropayments. The resulting credential and financial authorization create a material risk beyond ordinary public-data queries.

Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

SKILL.md:24

Ruby/shell backtick execution

**Install**: `npm install -g chainbase-cli` (or use `npx chainbase-cli`)

The skill instructs users to install a globally scoped third-party npm package. This expands the trusted supply chain and can execute package installation scripts.

Medium

SKILL.md:28

Ruby/shell backtick execution

**x402 Payment**: Supports pay-per-call micropayments via `--x402` flag. Setup: `chainbase config se

The skill instructs users to configure a private key for x402 payments. A private key can authorize financial transactions if entered into an untrusted or compromised CLI.

Risk Factors

🌐 Network access (9)

clawhub.json:10 clawhub.json:11 README.md:40 references/tops-api.md:43 references/tops-api.md:102 SKILL.md:20 SKILL.md:26 SKILL.md:135 SKILL.md:136

🔑 Env variables (2)

README.md:65 SKILL.md:26

⚙️ External commands (50)

Audited by: claude

Audit version 1

Jul 10, 2026, 12:29 AM

Most static URL, environment, and chain_id alerts are documentation false positives. The skill intentionally instructs agents to install and run Chainbase CLI, including remote queries, SQL, credentials, and optional x402 payment setup. No prompt injection or credential exfiltration text was found in the reviewed files.

Files scanned

853

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

High

SKILL.md:28 SKILL.md:108

Private Key and Paid Call Handling

SKILL.md documents x402 micropayments and the command chainbase config set private-key 0x.... This can lead agents or users to handle wallet private keys and paid calls during data access.

The private-key and x402 instructions are explicit in SKILL.md. The risk is contextual because the key is a placeholder and the payment mode is optional.

Capability review items (41)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

SKILL.md:28

Ruby/shell backtick execution

**x402 Payment**: Supports pay-per-call micropayments via `--x402` flag. Setup: `chainbase config se

The skill instructs configuring a private key for x402 micropayments. Handling a signing key in CLI configuration creates financial and credential exposure risk.

High

SKILL.md:108

Ruby/shell backtick execution

| `--x402` | Enable x402 micropayment mode | `false` |

The --x402 option enables paid micropayment mode for external calls. Payment-capable command execution needs explicit user control and spending boundaries.

Medium

SKILL.md:24

Ruby/shell backtick execution

**Install**: `npm install -g chainbase-cli` (or use `npx chainbase-cli`)

The skill instructs users or agents to install or run a third-party npm CLI. Global npm installation and npx execution carry supply-chain and local command execution risk.

Medium

SKILL.md:26

Ruby/shell backtick execution

**Auth**: Set API key via `chainbase config set api-key YOUR_KEY`, or env `CHAINBASE_API_KEY`. Falls

The skill instructs configuring an API key through the CLI or environment variable. This is expected authentication, but it handles sensitive credentials through external tooling.

Medium

SKILL.md:30-42 SKILL.md:114-116 SKILL.md:141-159

Ruby/shell backtick execution · 3 occurrences

```bash

The code block contains chainbase CLI commands for token, ENS, and SQL queries. These commands trigger local process execution and remote Chainbase requests.

Medium

SKILL.md:63-64

Ruby/shell backtick execution

| Latest block number | `chainbase block latest` |

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:64-65

Ruby/shell backtick execution

| Block details | `chainbase block detail <number>` |

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:65-66

Ruby/shell backtick execution

| Transaction detail | `chainbase tx detail <hash>` |

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:66-67

Ruby/shell backtick execution

| Wallet transaction history | `chainbase tx list <address>` |

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:67-68

Ruby/shell backtick execution

| Token info (name, symbol, supply) | `chainbase token metadata <contract>` |

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:68-69

Ruby/shell backtick execution

| Token price | `chainbase token price <contract>` |

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:69-70

Ruby/shell backtick execution

| Historical token price | `chainbase token price-history <contract> --from <ts> --to <ts>` |

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:70-71

Ruby/shell backtick execution

| List of holder addresses | `chainbase token holders <contract>` |

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:71-72

Ruby/shell backtick execution

| Top token holders / who holds a token | `chainbase token top-holders <contract>` |

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:72-73

Ruby/shell backtick execution

| Token transfer history | `chainbase token transfers --contract <addr>` |

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:73-74

Ruby/shell backtick execution

| Native token balance (ETH/BNB) | `chainbase balance native <address>` |

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:74-75

Ruby/shell backtick execution

| ERC20 token balances of wallet | `chainbase balance tokens <address>` |

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:75-76

Ruby/shell backtick execution

| DeFi portfolio positions | `chainbase balance portfolios <address>` |

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:76-77

Ruby/shell backtick execution

| ENS domains held by address | `chainbase domain ens <address>` |

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:77-78

Ruby/shell backtick execution

| ENS name → address | `chainbase domain ens-resolve <name>` |

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:78-79

Ruby/shell backtick execution

| Address → ENS name | `chainbase domain ens-reverse <address>` |

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:79-80

Ruby/shell backtick execution

| Space ID resolve (BSC) | `chainbase domain spaceid-resolve <domain>` |

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:80-81

Ruby/shell backtick execution

| Space ID reverse (BSC) | `chainbase domain spaceid-reverse <address>` |

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:81-82

Ruby/shell backtick execution

| Call smart contract function | `chainbase contract call --address <contract> --function "fn" --abi

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:82-88

Ruby/shell backtick execution

| **Anything not covered above** | **SQL API**: `chainbase sql execute "SELECT ..."` |

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:93-95

Ruby/shell backtick execution

- If unknown, use `chainbase token metadata <contract>` or ask the user for the contract address

The line tells the agent to run a chainbase token metadata command when a contract is unknown. This is legitimate but still an external command based on task context.

Medium

SKILL.md:95-104

Ruby/shell backtick execution

4. **Execute** — Run the CLI command. Add `--json` when you need to parse the output programmaticall

The workflow explicitly tells the agent to run the selected CLI command. That confirms external command execution is intended behavior.

Medium

SKILL.md:133-136

Ruby/shell backtick execution

Query crypto social signals via `chainbase tops`. No API key required — free to use.

The line directs use of the chainbase tops command family to query social signals. This is disclosed, but it is external command and remote network activity.

Medium

SKILL.md:169-170

Ruby/shell backtick execution

| What's trending in crypto right now | `chainbase tops trending [--language <lang>]` |

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:170-171

Ruby/shell backtick execution

| Details / summary of a specific topic | `chainbase tops topic <topic_id>` |

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:171-172

Ruby/shell backtick execution

| Raw tweets / posts under a topic | `chainbase tops posts <topic_id>` |

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:172-173

Ruby/shell backtick execution

| Find topics related to a narrative keyword | `chainbase tops search <keyword>` |

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:173-178

Ruby/shell backtick execution

| Recent Twitter/X mentions of a project or keyword | `chainbase tops mentions <keyword>` |

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:178

Ruby/shell backtick execution

1. `chainbase tops trending` → get current top topics (note `id` fields)

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:179-180

Ruby/shell backtick execution

2. `chainbase tops topic <id>` → dive into summary, keywords, representative tweets

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:180-183

Ruby/shell backtick execution

3. `chainbase tops posts <id>` → retrieve raw tweets for sentiment analysis

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:183-185

Ruby/shell backtick execution

1. `chainbase tops search <keyword>` → find candidate topics from a vague term

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:185-188

Ruby/shell backtick execution

3. `chainbase tops topic <id>` → confirm topic details

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Medium

SKILL.md:188-193

Ruby/shell backtick execution

1. `chainbase tops mentions <keyword>` → monitor social mentions of a project/token

The line directs use of chainbase CLI with user-provided values or remote service calls. This is legitimate for the skill, but it is real external command and network execution risk.

Risk Factors

🔑 Env variables (3)

CLAUDE.md:20 README.md:65 SKILL.md:26

🌐 Network access (9)

clawhub.json:10 clawhub.json:11 README.md:40 references/tops-api.md:43 references/tops-api.md:102 SKILL.md:20 SKILL.md:26 SKILL.md:135 SKILL.md:136

⚙️ External commands (50)

Audited by: codex

← Back to Skill