ClawHub
Back to skill

Security audit

clawdio

Security checks across malware telemetry and agentic risk

Overview

This documentation-only skill is transparent about its paid report API, but it encourages wallet-funded automatic purchases without clear approval or spending controls.

Install only if you are comfortable connecting an agent to a paid x402 API. Use a dedicated low-balance wallet, require explicit approval before each purchase, browse the free catalog first, verify the report ID and price, and handle speaker-attributed transcripts carefully.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill clearly sends users to an external service to process Twitter Spaces and voice-conversation data, and the returned artifacts include participant identities, handles, avatars, transcripts, and other conversation-derived metadata. Omitting an explicit privacy warning can cause users or downstream agents to transmit sensitive or regulated third-party data without informed consent or awareness of retention, sharing, and jurisdictional risks.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The API documentation explicitly instructs clients to make a GET request that can trigger an automatic x402 wallet payment, while also noting that repeat access requires repurchase. Using GET for a state-changing, billable action increases the risk of accidental or automated purchases by agents, prefetchers, crawlers, or users who do not understand that a simple fetch can spend funds.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The integration guide explicitly states that the payment flow is 'fully automatic' and that an agent can 'browse and purchase Clawdio reports automatically' without any adjacent warning that real wallet signatures and USDC spending may occur. In an agent setting, this can normalize autonomous spending behavior and lead operators to connect funded wallets without understanding that a simple integration may trigger paid transactions.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The direct purchase sample shows `x402Fetch` against `/catalog/purchase` and says payment is handled automatically, but it does not warn that invoking this request may immediately authorize a paid transaction through the wallet client. Because this skill is designed for agent use and encourages self-discovery plus automated purchasing, the omission increases the risk of unintended fund expenditure by autonomous systems or unsuspecting integrators.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.