ClawHub
Back to skill

Security audit

Stellary MCP

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed connector to Stellary's hosted MCP service, with token and remote-data risks that match its project-management purpose.

Install only if you intend to let an assistant access Stellary through Stellary's hosted MCP service. Start with read-only token scopes such as projects:read and pilotage:read, add write scopes only when needed, use a dedicated expiring token, and revoke it if exposed.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

External Transmission

Medium
Category
Data Exfiltration
Content
"description": "Connect Gemini CLI to Stellary, the AI-native project piloting SaaS, through the hosted Streamable HTTP MCP at https://api.stellary.co/mcp. Authenticate with a Bearer personal access token (not OAuth, not a local stdio server).",
  "mcpServers": {
    "stellary": {
      "httpUrl": "https://api.stellary.co/mcp",
      "headers": {
        "Authorization": "Bearer ${STELLARY_TOKEN}"
      }
Confidence
91% confidence
Finding
The skill is configured to send requests to an external hosted MCP endpoint and attach a Bearer token in the Authorization header. Even if intended, this creates a real trust boundary: prompts, tool inputs, metadata, and authentication material may be transmitted to a third-party service, so compromise or misuse of that service could expose sensitive project data or enable account access.

Credential Access

High
Category
Privilege Escalation
Content
"settings": [
    {
      "name": "Stellary token",
      "description": "Personal access token from Stellary Account settings → API tokens. Required as Authorization Bearer for https://api.stellary.co/mcp.",
      "envVar": "STELLARY_TOKEN",
      "sensitive": true
    }
Confidence
88% confidence
Finding
The skill requires a personal access token to be stored in an environment variable and used as a Bearer credential for a third-party hosted MCP. While common, using long-lived personal tokens increases blast radius if the local environment, logs, configuration handling, or remote service are compromised, because the credential may grant broad access to the user's Stellary account or data.

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
README.fr.md:30