ClawHub
Back to skill

Security audit

finding-trending-twitter-topics-for-content

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly purpose-aligned for Twitter/X trend research, but its REST fallback documents an unsafe way to pass an Apify API token in a URL.

Review before installing or using. The core behavior matches the advertised Twitter/X trend-research purpose, but do not use the REST fallback as written with a real token in the URL; prefer an authorization header or managed Apify tooling, protect any .env file, and avoid sending confidential campaign, customer, or strategy terms as search queries.

A.I.G

Vulnerability Patterns
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T09 · Insecure Skill Coding Practices

Warning
Location
SKILL.md:103
Finding

Apify API Token Transmitted in URL Query String

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The manifest description lists many natural-language trigger phrasings such as finding what a target audience is talking about or identifying conversations to join, but it does not define exclusion conditions or negative examples. This can cause overlap with general research or social-media analysis requests and may lead to unintended invocation.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
82% confidence
Finding

The skill explicitly sends user-supplied search terms to a third-party service (Apify), which is an external data transmission boundary. While this is expected for the skill's purpose, it becomes a real security/privacy concern if users are not clearly informed that their prompts, search queries, or derived sensitive terms may be transmitted off-platform to an external provider.

Content

Scanner excerpt · SKILL.md (reported line 106)May include surrounding context.

REST API fallback:

bash
curl -X POST   "https://api.apify.com/v2/acts/apidojo~tweet-scraper/runs?token=$APIFY_TOKEN"   -H "Content-Type: application/json"   -d '{
    "searchTerms": ["B2B SaaS", "#saas", "B2B SaaS 2026"],
    "maxItems": 500,
    "tweetLanguage": "en"

External Transmission

Medium
Category
Data Exfiltration
Confidence
82% confidence
Finding

The skill explicitly sends user-supplied search terms to a third-party service (Apify), which is an external data transmission boundary. While this is expected for the skill's purpose, it becomes a real security/privacy concern if users are not clearly informed that their prompts, search queries, or derived sensitive terms may be transmitted off-platform to an external provider.

Content

Scanner excerpt · SKILL.md (reported line 106)May include surrounding context.

REST API fallback:

bash
curl -X POST   "https://api.apify.com/v2/acts/apidojo~tweet-scraper/runs?token=$APIFY_TOKEN"   -H "Content-Type: application/json"   -d '{
    "searchTerms": ["B2B SaaS", "#saas", "B2B SaaS 2026"],
    "maxItems": 500,
    "tweetLanguage": "en"

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
89% confidence
Finding

The markdown includes commands that write CSV and JSON output files automatically, but the skill description does not clearly warn users that running these examples will create files on disk. For markdown files, behaviors that affect user data or system state should be disclosed so the user understands the side effect before use.

Content

No source excerpt is available for this finding.