ClawHub
Back to skill

Security audit

pawr-link

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward pawr.link profile API guide, with paid x402 actions and public profile data disclosed in the documentation.

Before installing or using this skill, treat create, curated-create, and update examples as paid actions when run through an x402-compatible wallet client. Only send profile details, links, email addresses, and descriptions that you are comfortable processing through pawr.link and publishing on a public profile.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill explicitly describes automatic x402 payments and provides ready-to-run paid create/update flows without a prominent warning that invocation will spend wallet funds. In an agent setting, this can cause unintended on-chain charges if a user or orchestrating agent follows the examples without clear spend confirmation.

External Transmission

Medium
Category
Data Exfiltration
Content
## Create Profile — $9 USDC

```bash
curl -X POST https://www.pawr.link/api/x402/create-profile \
  -H "Content-Type: application/json" \
  -d '{
    "wallet": "0xYourWalletAddress",
Confidence
60% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The curated profile flow encourages submission of descriptions containing social accounts, links, and other identity details, but does not clearly warn that this data is sent to an external service for AI processing and then published live. Users may disclose more information than intended, creating privacy and reputational risk through third-party processing and public exposure.

Intent-Code Divergence

Low
Confidence
95% confidence
Finding
Line L017 says updates cost '$0.10', while the manifest description at L003 says '$10 curated' and the dedicated update section at L083 plus pricing table at L268 consistently document updates as '$0.10 USDC'. This is an active contradiction in the file's own intent/documentation, not just missing detail.

Static analysis

No suspicious patterns detected.