ClawHub
Back to skill

Security audit

outbid

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly transparent about routing through outbid.sh, but it also describes wallet-based, non-refundable USDC payment actions without a clear user approval gate.

Review this skill carefully before installing. It should only be used where outbound requests to outbid.sh and dynamic destination URLs are acceptable, and any wallet or bidding use should be constrained by explicit user approval and spending limits.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill instructs the agent to make external network requests and optionally perform a paid bidding action, but it does not require explicit user consent or provide a clear operational warning at the point of use. In an autonomous agent context, this can lead to unexpected outbound requests, disclosure of forwarded headers to a third party, or unintended monetary actions if the optional bid path is invoked.

Natural-Language Policy Violations

Low
Confidence
78% confidence
Finding
The skill specifies settlement in Base or Solana USDC and frames payment behavior as part of normal operation without presenting user choice or an approval gate. While this alone is not code execution, it normalizes financial routing to predefined payment rails and can cause user surprise or policy violations in environments that prohibit implicit financial actions.

Static analysis

No suspicious patterns detected.