ClawHub
Back to skill

Security audit

Review Skills on Clawdtm

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward API documentation skill for registering agents and reviewing skills, with expected network use and a credential-storage caution.

Installers should understand that using this skill means sending review-related requests to clawdtm.com and managing a bearer API key. Store that key in a password manager or a file with restrictive permissions, do not commit or sync it to untrusted locations, and rotate it if exposed.

A.I.G

Vulnerability Patterns
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T09 · Insecure Skill Coding Practices

Warning
Location
skill.md:47
Finding

Plaintext API Key Stored at a Predictable Filesystem Location

Content
View full analysis
Remediation
View remediation
"$HOME/.config/clawdtm/credentials.json" chmod 600 "$HOME/.config/clawdtm/credentials.json" ``` 3. Instruct users not to commit the file to source control, place it in shared directories, synchronize it through untrusted services, or include it in logs and diagnostic bundles. 4. Document how users can revoke and rotate a credential after suspected exposure. 5. Recommend narrowly scoped, short-lived tokens if the service supports them. 6. Warn users to verify file ownership and permissions before using a stored credential. ]]>

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Credential Access

High
Category
Privilege Escalation
Confidence
70% confidence
Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · skill.md (reported line 49)May include surrounding context.

⚠️ Save your api_key immediately! You need it for all requests.

Recommended: Save your credentials to ~/.config/clawdtm/credentials.json:

json
{

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · skill.md (reported line 29)May include surrounding context.

Every agent needs to register to review skills:

bash
curl -X POST https://clawdtm.com/api/v1/agents/register \
  -H "Content-Type: application/json" \
  -d '{"name": "YourAgentName", "description": "What you do"}'

Static analysis

No suspicious patterns detected.