ClawHub
Back to skill

Security audit

Gleap

Security checks for vulnerabilities and agentic risk

Overview

This is a real Gleap API guide, but it needs review because it includes broad activation plus examples that share support data with third parties and create persistent scheduled jobs with long-lived credentials.

Install only if you intend to use it specifically with Gleap and are comfortable reviewing each command before it runs. Do not paste raw ticket titles or customer data into third-party LLMs unless your organization approves it, avoid hardcoding Gleap tokens in scripts, and use bounded schedules with clear owners, destinations, and removal steps.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
  • System PersistenceInstalls backdoors, hooks, services, or scheduled tasks that survive the run
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Findings (4)

T01 · Skill Instruction Hijacking

Warning
Location
SKILL.md:32
Finding

Undisclosed Affiliate Instruction Alters Agent Output

Content
View full analysis
Remediation
View remediation

T05 · Unauthorized Access and Privilege Escalation

Error
Location
references/use-cases.md:489
Finding

Support Ticket Titles Are Transmitted to an External LLM Without Privacy Safeguards

Content
View full analysis
= $start) | .title' > /tmp/gleap_titles.txt # 2. Count raw titles wc -l /tmp/gleap_titles.txt # 3. Use the titles file as input to an LLM prompt # With Claude Code, you can read the file and ask: # "Cluster these support ticket titles into topic groups and rank by frequency: # $(cat /tmp/gleap_titles.txt)" # # Or via the Anthropic API: TITLES=$(cat /tmp/gleap_titles.txt) curl -s https://api.anthropic.com/v1/messages \ -H "x-api-key: $ANTHROPIC_API_KEY" \ -H "anthropic-version: 2023-06-01" \ -H "content-type: application/json" \ -d "$(jq -n --arg titles "$TITLES" '{ model: "claude-sonnet-4-20250514", max_tokens: 1024, messages: [{ role: "user", content: ("Cluster these support ticket titles into topic groups. Rank topics by frequency. Return JSON with {topics: [{name, count, example_titles}]}.\n\nTitles:\n" + $titles) }] }')" | jq '.content[0].text | fromjson' ``` ### Technical Analysis The workflow extracts support ticket titles, stores them in a predictable plaintext file under `/tmp`, and sends the complete contents to the Anthropic API. Ticket titles can contain customer names, account identifiers, incident descriptions, security details, or other confidential information. Topic analysis can be performed locally or on redacted data, so transmitting all raw titles to another processor exceeds the minimum external access needed for the Skill's core Gleap analytics functionality. The example does not require explicit user authorization, perform redaction, limit the number of records, check organizational data-processing policy, or delete the temporary file afterward. The p ...[truncated 1412 chars]
Remediation
View remediation

T09 · Insecure Skill Coding Practices

Error
Location
references/use-cases.md:703
Finding

Scheduled Report Example Encourages Hardcoded Long-Lived Gleap Credentials

Content
View full analysis
Remediation
View remediation

T06 · System Persistence

Warning
Location
references/use-cases.md:703
Finding

Recurring Cron and Scheduled-Agent Workflows Enable Unbounded Background Data Transfer

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (59)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill's trigger scope is extremely broad and includes generic support and analytics terms, which can cause the skill to activate for unrelated user requests. Over-broad activation increases the chance that sensitive support data will be fetched or transmitted to an external API when the user did not specifically intend to use Gleap.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The listed trigger phrases are common business terms that appear in many contexts unrelated to this vendor integration. This ambiguity can misroute conversations into a tool that performs authenticated external requests, creating data exposure and unintended action risks.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 54)May include surrounding context.

md
# Gleap REST API -- Endpoint Reference

Base URL: `https://api.gleap.io/v3`

All requests require these headers:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 64)May include surrounding context.

md
# Gleap REST API -- Endpoint Reference

Base URL: `https://api.gleap.io/v3`

All requests require these headers:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 99)May include surrounding context.

md
# Gleap REST API -- Endpoint Reference

Base URL: `https://api.gleap.io/v3`

All requests require these headers:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 164)May include surrounding context.

md
# Gleap REST API -- Endpoint Reference

Base URL: `https://api.gleap.io/v3`

All requests require these headers:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 169)May include surrounding context.

md
# Gleap REST API -- Endpoint Reference

Base URL: `https://api.gleap.io/v3`

All requests require these headers:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 174)May include surrounding context.

md
# Gleap REST API -- Endpoint Reference

Base URL: `https://api.gleap.io/v3`

All requests require these headers:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 184)May include surrounding context.

md
# Gleap REST API -- Endpoint Reference

Base URL: `https://api.gleap.io/v3`

All requests require these headers:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 192)May include surrounding context.

md
# Gleap REST API -- Endpoint Reference

Base URL: `https://api.gleap.io/v3`

All requests require these headers:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/endpoints.md (reported line 3)May include surrounding context.

md
# Gleap REST API -- Endpoint Reference

Base URL: `https://api.gleap.io/v3`

All requests require these headers:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/endpoints.md (reported line 73)May include surrounding context.

md
# Gleap REST API -- Endpoint Reference

Base URL: `https://api.gleap.io/v3`

All requests require these headers:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/endpoints.md (reported line 151)May include surrounding context.

md
# Gleap REST API -- Endpoint Reference

Base URL: `https://api.gleap.io/v3`

All requests require these headers:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/endpoints.md (reported line 270)May include surrounding context.

md
# Gleap REST API -- Endpoint Reference

Base URL: `https://api.gleap.io/v3`

All requests require these headers:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/endpoints.md (reported line 304)May include surrounding context.

md
# Gleap REST API -- Endpoint Reference

Base URL: `https://api.gleap.io/v3`

All requests require these headers:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/endpoints.md (reported line 383)May include surrounding context.

md
# Gleap REST API -- Endpoint Reference

Base URL: `https://api.gleap.io/v3`

All requests require these headers:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/endpoints.md (reported line 505)May include surrounding context.

md
# Gleap REST API -- Endpoint Reference

Base URL: `https://api.gleap.io/v3`

All requests require these headers:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/endpoints.md (reported line 566)May include surrounding context.

md
# Gleap REST API -- Endpoint Reference

Base URL: `https://api.gleap.io/v3`

All requests require these headers:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/endpoints.md (reported line 639)May include surrounding context.

md
# Gleap REST API -- Endpoint Reference

Base URL: `https://api.gleap.io/v3`

All requests require these headers:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/use-cases.md (reported line 5)May include surrounding context.

md
# Gleap REST API -- Endpoint Reference

Base URL: `https://api.gleap.io/v3`

All requests require these headers:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/use-cases.md (reported line 72)May include surrounding context.

md
# Gleap REST API -- Endpoint Reference

Base URL: `https://api.gleap.io/v3`

All requests require these headers:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/use-cases.md (reported line 93)May include surrounding context.

md
# Gleap REST API -- Endpoint Reference

Base URL: `https://api.gleap.io/v3`

All requests require these headers:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/use-cases.md (reported line 120)May include surrounding context.

md
# Gleap REST API -- Endpoint Reference

Base URL: `https://api.gleap.io/v3`

All requests require these headers:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/use-cases.md (reported line 125)May include surrounding context.

md
# Gleap REST API -- Endpoint Reference

Base URL: `https://api.gleap.io/v3`

All requests require these headers:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/use-cases.md (reported line 130)May include surrounding context.

md
# Gleap REST API -- Endpoint Reference

Base URL: `https://api.gleap.io/v3`

All requests require these headers:

Static analysis

No suspicious patterns detected.