ClawHub
Back to skill

Security audit

AgentMailer Events

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent AgentMailer event-integration guide with disclosed API operations and security precautions, not hidden or deceptive behavior.

Install this only if you intend to build or operate AgentMailer event consumers. Use least-privilege AgentMailer credentials, prefer explicit event subscriptions, protect webhook signing secrets and WebSocket tickets as credentials, and review any automated create, update, delete, or secret-rotation actions before running them in production.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Tool Parameter Abuse

High
Category
Tool Misuse
Content
- `POST /v1/webhooks`: create an endpoint; requires `webhooks:write`.
- `GET /v1/webhooks/{webhookId}`: inspect one endpoint.
- `PATCH /v1/webhooks/{webhookId}`: update URL, subscribed event types, description, or enabled state.
- `DELETE /v1/webhooks/{webhookId}`: delete an endpoint.
- `POST /v1/webhooks/{webhookId}/rotate-secret`: rotate the signing secret.

Creation accepts an HTTPS `url`, optional `podId` or `inboxId`, up to 50 `eventTypes`, and an optional description. An empty event-type list follows the server's current all-events behavior; prefer an explicit least-privilege list for production consumers.
Confidence
80% confidence
Finding
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

External Transmission

Medium
Category
Data Exfiltration
Content
# AgentMailer events

Use signed webhooks for durable server-to-server delivery and the Pod-scoped WebSocket stream for low-latency agent reactions. The current schemas are published at `https://api.agentmailer.ai/openapi.json`.

## Webhooks
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Static analysis

No suspicious patterns detected.