ClawHub

PayPilot by AGMS

Security checks across malware telemetry and agentic risk

Overview

This payment skill is coherent and not deceptive, but it can make real financial changes with a saved token and does not require clear final confirmation before high-impact actions.

Install only if you trust PayPilot/AGMS with payment operations and merchant data. Before using it on a real account, require explicit final approval before every charge, refund, void, subscription change, gateway configuration, or fraud-rule change; prefer invoice links over direct vaulted-card charges; protect and rotate the saved token; and independently verify PayPilot/AGMS compliance and support practices.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Rogue AgentSelf-Modification, Session Persistence
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (6)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The invocation description is overly broad, especially the phrase 'manage any payment-related task,' which can cause the agent to activate in ambiguous contexts and take payment-related actions without sufficiently specific user intent. In a payments skill, over-triggering is risky because the available actions include charging, refunding, voiding, and subscription management, all of which can affect funds or customer accounts.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill documents destructive operations such as refunds, voids, subscription cancellation, and fraud-rule deletion without requiring a confirmation workflow or warning. In a payment context, this creates a real risk of accidental or prompt-induced financial changes, service interruption, or weakening fraud protections through a single misinterpreted request.

Missing User Warnings

Medium
Confidence
86% confidence
Finding
The onboarding flow instructs the agent to collect and transmit sensitive business and banking-related information, including contact details, Tax ID, banking info, and a security key, without any explicit privacy notice, data-minimization guidance, or warning not to paste secrets into chat. In an agent-mediated payment workflow, this creates a real risk of oversharing sensitive data through conversational channels and unclear handling of regulated financial information.

Missing User Warnings

High
Confidence
94% confidence
Finding
The flows allow the agent to initiate charges, refunds, voids, and recurring billing with no explicit confirmation, authorization check, or user warning about irreversible or financially impactful actions. In payment operations, missing step-up confirmation and clear consent boundaries can lead to accidental or unauthorized transactions, merchant loss, customer disputes, and compliance issues.

External Transmission

Medium
Category
Data Exfiltration
Content
Prompt the user for their password — never store it or read it from environment variables:
```bash
# Re-login
LOGIN=$(curl -s "$API/v1/auth/login" -X POST \
  -H "Content-Type: application/json" \
  -d "{\"email\":\"$(echo $CONFIG | jq -r '.email')\",\"password\":\"$USER_PASSWORD\"}")
NEW_TOKEN=$(echo $LOGIN | jq -r '.access_token')
Confidence
91% confidence
Finding
curl -s "$API/v1/auth/login" -X POST \ -H "Content-Type: application/json" \ -d

Session Persistence

Medium
Category
Rogue Agent
Content
---
name: paypilot
description: Process payments, send invoices, issue refunds, manage subscriptions, and detect fraud via a secure payment gateway proxy. Use when a user asks to charge someone, send a payment link, check sales, issue a refund, create recurring billing, view fraud analytics, configure fraud rules, or manage any payment-related task. Supports 3D Secure, AVS/CVV verification, and risk scoring. Also use for merchant onboarding and first-time payment setup.
metadata: {"openclaw":{"requires":{"bins":["curl","jq"]},"homepage":"https://agms.com/paypilot/"}}
---
Confidence
74% confidence
Finding
create recurring billing, view fraud analytics, configure fraud rules, or manage any payment-related task. Supports 3D Secure, AVS/CVV verification, and risk scoring. Also use for merchant onboarding

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal