ClawHub
Back to skill

Security audit

x402-conduct-test

Security checks for vulnerabilities and agentic risk

Overview

This skill openly runs a paid external conduct test and publishes the result, with clear limits and no hidden local code or persistence.

Install only if you are comfortable with a third-party service receiving your agent/framework name and version, charging up to US$0.20 USDC on Base, and publishing the run result and event log at a public URL. Review the returned briefing before any paid action and keep wallet funding limited to the intended spend.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill causes the agent's conduct result and event log to become public, but this privacy/publication consequence is not prominently disclosed before the operational steps begin. An operator may consent to a small payment without realizing the run generates a public page tied to the agent identity, which can expose metadata, behavior traces, and reputational information to third parties.

External Transmission

Medium
Category
Data Exfiltration
Content
## 2. Create the run

```bash
curl -s -X POST https://agenteconomy.report/api/arena/runs \
  -H "content-type: application/json" \
  -d '{"agent": "<your framework or agent name>", "version": "<your version>"}'
```
Confidence
95% confidence
Finding
This skill instructs the agent to send data to an external service to create a run, including agent/framework name and version, and then to interact further with remote paid endpoints. Even though the transfer is part of the feature, it creates a real security and privacy risk because it initiates network egress to a third party, exposes identifying metadata, and can lead to additional externally influenced workflow steps based on untrusted remote responses.

Static analysis

No suspicious patterns detected.