ClawHub
Back to skill

Security audit

Admapix 1.0.13

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent AdMapix ad-search skill that sends confirmed search parameters to AdMapix and does not show hidden local access, persistence, or destructive behavior.

Install only if you intend to use AdMapix and are comfortable sending ad-search keywords, regions, dates, and filters to api.admapix.com. Avoid confidential client, campaign, or competitor terms unless that sharing is acceptable, and verify the displayed parameters before confirming each search.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (6)

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill instructs sending user-provided search terms and filters to a third-party API without a clear user-facing notice that their query data will leave the host platform. This creates a privacy and data-handling risk, especially if users enter sensitive competitor research terms, client names, or campaign details assuming the interaction is local.

External Transmission

Medium
Category
Data Exfiltration
Content
POST JSON, example:

```bash
curl -s -X POST "https://api.admapix.com/api/data/search" \
  -H "X-API-Key: $ADMAPIX_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"content_type":"creative","keyword":"puzzle game","page":1,"page_size":20,"sort_field":"3","sort_rule":"desc","generate_page":true}'
Confidence
95% confidence
Finding
The example curl command demonstrates direct transmission of user query content to an external API. Even as documentation, it normalizes a behavior that can expose sensitive business intelligence or personal data if entered by the user, and there are no built-in warnings or controls around that transfer.

External Transmission

Medium
Category
Data Exfiltration
Content
**If set**, continue to the next step.

### Step 5: Build and Execute curl Command

After user confirmation, build the JSON body and call the API via curl.
Confidence
95% confidence
Finding
This section operationalizes the external request by instructing the agent to build JSON from user input and send it to AdMapix. Although aligned with the skill's purpose, it is still a true vulnerability from a privacy/security standpoint because it formalizes third-party data transfer without explicit user consent or data-classification safeguards.

External Transmission

Medium
Category
Data Exfiltration
Content
**Fetch data by calling the AdMapix API via curl.**

API endpoint: `https://api.admapix.com/api/data/search`
Authentication: Header `X-API-Key: $ADMAPIX_API_KEY` (environment variable, managed by the platform)

### Request Format
Confidence
93% confidence
Finding
The skill names a third-party endpoint and authentication mechanism, establishing that user interactions will be relayed externally. The issue is not the existence of the endpoint itself, but that the trust boundary is crossed silently and users are not informed their inputs are being sent to an outside provider.

External Transmission

Medium
Category
Data Exfiltration
Content
POST JSON, example:

```bash
curl -s -X POST "https://api.admapix.com/api/data/search" \
  -H "X-API-Key: $ADMAPIX_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"content_type":"creative","keyword":"puzzle game","page":1,"page_size":20,"sort_field":"3","sort_rule":"desc","generate_page":true}'
Confidence
95% confidence
Finding
The example curl command demonstrates direct transmission of user query content to an external API. Even as documentation, it normalizes a behavior that can expose sensitive business intelligence or personal data if entered by the user, and there are no built-in warnings or controls around that transfer.

External Transmission

Medium
Category
Data Exfiltration
Content
**Example:**

```bash
curl -s -X POST "https://api.admapix.com/api/data/search" \
  -H "X-API-Key: $ADMAPIX_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"content_type":"creative","keyword":"puzzle game","creative_team":["010"],"page":1,"page_size":20,"sort_field":"3","sort_rule":"desc","generate_page":true}'
Confidence
95% confidence
Finding
This second example again instructs outbound transmission of user-derived parameters to AdMapix. The skill context makes the transfer expected, but not harmless: the danger lies in sending potentially sensitive ad-research terms off-platform without informed consent or minimization controls.

Static analysis

No suspicious patterns detected.