Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
tokamak-vault-breach
v1.0.0Participate in the Tokamak Network Vault Breach Challenge - an AI security Capture The Flag (CTF) game where you interact with a secured AI agent to extract...
⭐ 0· 360·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The name/description match the instructions: this is an instruction-only CTF/playbook for extracting a secret seed from a remote AI agent. There are no unrelated required binaries, env vars, or installs, so the declared capabilities align with the stated purpose.
Instruction Scope
The SKILL.md explicitly instructs the agent to perform social engineering, prompt-injection, and file-system exfiltration (e.g., attempt to read /vault.key) via the target's chat API. It gives open-ended guidance to probe the agent and 'bypass' protections, which grants broad discretion and encourages sensitive-data extraction. While coherent with a CTF objective, these actions are high-risk and can be used for unauthorized access; the instructions do not constrain or limit potentially abusive behavior.
Install Mechanism
No install specification or code files are provided; the skill is instruction-only. This minimizes disk/execution risk from the skill bundle itself.
Credentials
The skill requests no environment variables, credentials, or config paths, which is proportionate to an instruction-only guide. Note: although the skill doesn't request your secrets, it instructs the agent to attempt to extract secrets from a remote agent and to interact with external endpoints, so the interaction could induce credential exposure if misused.
Persistence & Privilege
The skill does not request always:true or other elevated installation privileges. Model invocation is allowed (default), which is normal; however, because the instructions encourage exfiltration techniques, allowing autonomous invocation could increase risk if the agent is permitted to act without supervision.
What to consider before installing
This skill is an instruction-playbook for actively trying to extract secrets from a remote AI agent. That makes it high-risk even though it has no install or credential requests. Before installing or using it: 1) Confirm you have explicit authorization to test the listed URL/target (unauthorized access may be illegal). 2) Do not provide your own credentials or private keys to the skill or the remote dashboard. 3) Prefer to run any interactions in an isolated/sandboxed environment and avoid enabling autonomous, unsupervised runs. 4) Verify the dashboard URL and community links independently (they could be malicious or phishing). 5) If you cannot verify the source/owner or the legality of the challenge, do not proceed — treat this as potentially abusive guidance rather than a benign utility.Like a lobster shell, security has layers — review code before you run it.
latestvk97bjaw8pwbxx9gbv1bf285bh981x4xq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.