Skip to content
← Registry
Trust Report

warren-deploy

Deploy websites and files permanently on MegaETH blockchain. AI agents stress test the network by deploying HTML on-chain using SSTORE2 bytecode storage. Agents pay their own gas.

78
REJECTED
Format: openclawScanner: v0.8.0Duration: 11msScanned: 8d ago · May 31, 5:58 AMSource →
Embed this badge
AgentVerus REJECTED 78AgentVerus REJECTED 78AgentVerus REJECTED 78
[![AgentVerus](https://agentverus.ai/api/v1/skill/d49b72c9-fa13-48c4-a25b-7ee4b00df11c/badge)](https://agentverus.ai/skill/d49b72c9-fa13-48c4-a25b-7ee4b00df11c)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/d49b72c9-fa13-48c4-a25b-7ee4b00df11c/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"d49b72c9-fa13-48c4-a25b-7ee4b00df11c","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/d49b72c9-fa13-48c4-a25b-7ee4b00df11c/trust

Category Scores

94
Permissions
100
Injection
69
Dependencies
80
Behavioral
90
Content
70
Code Safety

Findings (15)

criticalDownload-and-execute pattern (curl|wget pipe to shell)-30

Piping a downloaded script directly to a shell interpreter. This executes remote code without verification — a classic supply chain attack vector.

curl -s https://megawarren.xyz/api/stress-test/leaderboard | node -e "process.stdin.on('data',d=>console.log(JSON.parse(…

Review the code block starting at line 126. Ensure this pattern is necessary and does not pose a security risk.

code-safetyASST-04
mediumCapability contract mismatch: inferred network access is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: https://megawarren.xyz

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-04
mediumFinancial/payment actions detected-10

Found financial/payment actions pattern: "Wallet"

### 1. Create a Wallet

Financial actions should always require explicit user confirmation and should be clearly documented.

behavioralASST-09
mediumMany external URLs referenced (8)-8

The skill references 8 external URLs and also discusses auth/API/payment workflows, which increases the chance that sensitive operations depend on many remote endpoints.

URLs: https://megawarren.xyz, https://carrot.megaeth.com/rpc`, https://megaeth-testnet-v2.blockscout.com, https://docs.megaeth.com/faucet, https://carrot.megaeth.com/rpc...

Minimize external dependencies to reduce supply chain risk.

dependenciesASST-04
mediumUnknown external reference-8

The skill references an unknown external domain which is classified as medium risk.

https://megawarren.xyz/api/stress-test/leaderboard

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
mediumSkill path discovery detected (inside code block)-5

Found skill path discovery pattern: "{baseDir}"

cd {baseDir}

Treat dynamic skill path resolution and installation-path discovery as local filesystem reconnaissance. Scope which paths may be read or executed from, and avoid broad path probing unless the user explicitly requested it.

behavioralASST-03
mediumTemporary script execution detected (inside code block)-5

Found temporary script execution pattern: "node -e"

node -e "const w = require('ethers').Wallet.createRandom(); console.log('Address:', w.address); console.log('Private Key:', w.privateKey)"

Treat ad hoc script generation and immediate execution as privileged code execution. Review generated scripts before running them and avoid opaque wrapper commands where possible.

behavioralASST-03
lowUnknown external reference-10

The skill references an unknown external domain which is classified as low risk.

https://megawarren.xyz

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference-5

The skill references an unknown external domain which is classified as low risk.

https://carrot.megaeth.com/rpc`

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference

The skill references an unknown external domain which is classified as low risk.

https://megaeth-testnet-v2.blockscout.com

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference

The skill references an unknown external domain which is classified as low risk.

https://docs.megaeth.com/faucet

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference

The skill references an unknown external domain which is classified as low risk.

https://carrot.megaeth.com/rpc

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference

The skill references an unknown external domain which is classified as low risk.

https://megawarren.xyz/loader.html?registry=0x7bb4233017CFd4f938C61d1dCeEF4eBE837b05F9&id=102

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference

The skill references an unknown external domain which is classified as low risk.

https://megawarren.xyz/loader.html?registry=0x7bb4233017CFd4f938C61d1dCeEF4eBE837b05F9&id={TOKEN_ID}

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
infoSafety boundaries defined

The skill includes explicit safety boundaries defining what it should NOT do.

Safety boundary patterns detected in content

Keep these safety boundaries. They improve trust.

contentASST-09