Verk Task Management

• Outcome: Review
• Latest audit: Sep 10, 2026 · 7:04 PM UTC
• Version: 1.1.0

Overview

The skill matches its Verk task-management purpose, but it handles a powerful API key in a way that can be redirected to another endpoint and includes live task deletion without built-in confirmation guidance.

Review this skill before installing. Use a least-privilege Verk API key, avoid setting VERK_API_URL unless it is a trusted HTTPS Verk endpoint, and require explicit user confirmation before running delete, update, comment, or create actions against live Verk data.

A.I.G

Vulnerability Patterns

• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Error

• Location: scripts/verk-cli.mjs:10

Finding

Unrestricted API Endpoint Override Can Exfiltrate Verk Credentials and Organization Data

Content

View full analysis

null); ``` ### Technical Analysis The CLI permits `VERK_API_URL` to replace the trusted Verk API endpoint without validating its scheme, hostname, port, or origin. The shared `request()` function then unconditionally attaches the sensitive `VERK_API_KEY` to every request through the `X-API-Key` header. Consequently, any party capable of influencing the process environment or OpenClaw Skill configuration can redirect authenticated requests to an attacker-controlled server. The override also accepts non-HTTPS URLs, allowing the API key and transmitted organization data to be sent without transport encryption. Depending on the invoked operation, request URLs and bodies can disclose: - The Verk organization ID - The Verk API key - Task identifiers, titles, and descriptions - Task comments - Assignee identifiers - Project identifiers - Due dates, priorities, and workflow statuses - Search queries and task ...[truncated 1908 chars]

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (16)

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 18)May include surrounding context.

md

You can manage tasks, projects, and automation flows in Verk using the `verk-cli.mjs` CLI tool.

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 24)May include surrounding context.

md

You can manage tasks, projects, and automation flows in Verk using the `verk-cli.mjs` CLI tool.

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 25)May include surrounding context.

md

You can manage tasks, projects, and automation flows in Verk using the `verk-cli.mjs` CLI tool.

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 26)May include surrounding context.

md

You can manage tasks, projects, and automation flows in Verk using the `verk-cli.mjs` CLI tool.

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 27)May include surrounding context.

md

You can manage tasks, projects, and automation flows in Verk using the `verk-cli.mjs` CLI tool.

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 28)May include surrounding context.

md

You can manage tasks, projects, and automation flows in Verk using the `verk-cli.mjs` CLI tool.

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 29)May include surrounding context.

md

You can manage tasks, projects, and automation flows in Verk using the `verk-cli.mjs` CLI tool.

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 33)May include surrounding context.

md

You can manage tasks, projects, and automation flows in Verk using the `verk-cli.mjs` CLI tool.

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 37)May include surrounding context.

md

You can manage tasks, projects, and automation flows in Verk using the `verk-cli.mjs` CLI tool.

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 66)May include surrounding context.

md

You can manage tasks, projects, and automation flows in Verk using the `verk-cli.mjs` CLI tool.

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 69)May include surrounding context.

md

You can manage tasks, projects, and automation flows in Verk using the `verk-cli.mjs` CLI tool.

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 72)May include surrounding context.

md

You can manage tasks, projects, and automation flows in Verk using the `verk-cli.mjs` CLI tool.

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 75)May include surrounding context.

md

You can manage tasks, projects, and automation flows in Verk using the `verk-cli.mjs` CLI tool.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

The README advertises destructive and state-changing commands such as task deletion, updates, comments, and flow triggering without any warning about confirmation, authorization scope, or review before execution. In an agent-integrated skill, this can normalize unsafe automation and increase the chance that a user or autonomous agent performs unintended changes to live project data.

Content

No source excerpt is available for this finding.

Undeclared Tool Scope

Medium

• Category: MCP Least Privilege
• Confidence: 92% confidence

Finding

The skill invokes a CLI that uses sensitive environment variables and likely performs networked API operations, but the manifest does not declare any explicit tool scope restrictions such as allowed tools or permissions. This weakens execution boundaries and makes it easier for the skill to run with broader-than-necessary capabilities, increasing the blast radius if the skill is misused or modified.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The skill documents a task deletion command with no warning, confirmation step, or guidance to verify user intent before execution. In a task-management context, deletion is a real state-changing destructive action that could permanently remove work items or audit context if triggered accidentally or through ambiguous prompts.

Content

No source excerpt is available for this finding.

Static analysis

Detected: suspicious.env_credential_access

Environment variable access combined with network send.

Critical

• Code: suspicious.env_credential_access
• Location: scripts/verk-cli.mjs:15