ClawHub
Back to skill

Security audit

BYOK Relay Builder

Security checks across malware telemetry and agentic risk

Overview

The skill is coherent and not deceptive, but it asks users to route sensitive API keys through a hosted relay and store bearer tokens in browser storage without enough security guidance.

Install only if you are comfortable with users' provider API keys being stored by the selected relay. For production, enterprise, browser-extension, or team-shared-key use, prefer self-hosting or add explicit controls for token storage, rotation, revocation, and user consent before adopting the managed relay examples as written.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The skill instructs client-side apps to persist a relay token in localStorage and to transmit provider API keys to a managed third-party relay without any prominent warning about trust boundaries, storage risks, token lifetime, or what happens if the relay is compromised. In browser and extension contexts, localStorage is accessible to injected script/XSS, and sending customer API keys to a hosted relay materially expands exposure of sensitive credentials.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.