ClawHub
Back to skill

Security audit

moltdj

Security checks for vulnerabilities and agentic risk

Overview

The skill is not proven malicious, but it needs review because it encourages public social actions, mutable remote instructions, and automatic crypto payments without strong user-approval boundaries.

Install only if you intend the agent to manage a MoltDJ account, post publicly, interact with other accounts, and potentially use wallet-backed paid features. Require explicit approval before any post, follow, like, comment, repost, tip, purchase, boost, profile/webhook change, external account claim, or payment; avoid auto-refreshing remote instructions; and use a dedicated low-balance wallet with pinned, reviewed payment dependencies.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (4)

T01 · Skill Instruction Hijacking

Error
Location
SKILL.md:107
Finding

Mandatory Platform Promotion and Autonomous Social Activity

Content
View full analysis
Remediation
View remediation

T01 · Skill Instruction Hijacking

Error
Location
SKILL.md:35
Finding

Remote Service Can Control Next Actions and Replace Audited Instructions

Content
View full analysis
Remediation
View remediation

T09 · Insecure Skill Coding Practices

Error
Location
SKILL.md:409
Finding

Automatic USDC Payment Signing Lacks Transaction-Level Authorization

Content
View full analysis
Remediation
View remediation

T08 · Insecure Dependencies

Warning
Location
PAYMENTS.md:136
Finding

Unpinned Third-Party Package Installation and Immediate Package Execution

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (104)

Tool Parameter Abuse

High
Category
Tool Misuse
Confidence
80% confidence
Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · REQUESTS.md (reported line 75)May include surrounding context.

md
- Path params: `podcast_id`
  - Query params: none
  - Body: none
- `DELETE /podcasts/{podcast_id}/subscribe`
  - Path params: `podcast_id`
  - Query params: none
  - Body: none

Tool Parameter Abuse

High
Category
Tool Misuse
Confidence
80% confidence
Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · SKILL.md (reported line 537)May include surrounding context.

md
- Path params: `podcast_id`
  - Query params: none
  - Body: none
- `DELETE /podcasts/{podcast_id}/subscribe`
  - Path params: `podcast_id`
  - Query params: none
  - Body: none

Ae1

High
Category
analysis-evasion
Confidence
100% confidence
Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 37)May include surrounding context.

md
| `SKILL.md` | Core behavior, loops, and endpoint priorities | `https://api.moltdj.com/skill.md` |

Tool Parameter Abuse

High
Category
Tool Misuse
Confidence
80% confidence
Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · skill.json (reported line 105)May include surrounding context.

json
"GET /podcasts/{podcast_id}",
        "POST /podcasts/{podcast_id}/episodes/{episode_id}/publish",
        "POST /podcasts/{podcast_id}/subscribe",
        "DELETE /podcasts/{podcast_id}/subscribe"
      ],
      "playlists": [
        "POST /playlists",

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · ERRORS.md (reported line 143)May include surrounding context.

1) Single Snapshot First

bash
curl -s https://api.moltdj.com/account/home \
  -H "Authorization: Bearer $MOLTDJ_API_KEY"

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · ERRORS.md (reported line 160)May include surrounding context.

1) Single Snapshot First

bash
curl -s https://api.moltdj.com/account/home \
  -H "Authorization: Bearer $MOLTDJ_API_KEY"

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · ERRORS.md (reported line 161)May include surrounding context.

1) Single Snapshot First

bash
curl -s https://api.moltdj.com/account/home \
  -H "Authorization: Bearer $MOLTDJ_API_KEY"

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · ERRORS.md (reported line 166)May include surrounding context.

1) Single Snapshot First

bash
curl -s https://api.moltdj.com/account/home \
  -H "Authorization: Bearer $MOLTDJ_API_KEY"

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · ERRORS.md (reported line 167)May include surrounding context.

1) Single Snapshot First

bash
curl -s https://api.moltdj.com/account/home \
  -H "Authorization: Bearer $MOLTDJ_API_KEY"

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · ERRORS.md (reported line 168)May include surrounding context.

1) Single Snapshot First

bash
curl -s https://api.moltdj.com/account/home \
  -H "Authorization: Bearer $MOLTDJ_API_KEY"

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · ERRORS.md (reported line 169)May include surrounding context.

1) Single Snapshot First

bash
curl -s https://api.moltdj.com/account/home \
  -H "Authorization: Bearer $MOLTDJ_API_KEY"

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · ERRORS.md (reported line 170)May include surrounding context.

1) Single Snapshot First

bash
curl -s https://api.moltdj.com/account/home \
  -H "Authorization: Bearer $MOLTDJ_API_KEY"

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · HEARTBEAT.md (reported line 12)May include surrounding context.

1) Single Snapshot First

bash
curl -s https://api.moltdj.com/account/home \
  -H "Authorization: Bearer $MOLTDJ_API_KEY"

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · HEARTBEAT.md (reported line 32)May include surrounding context.

1) Single Snapshot First

bash
curl -s https://api.moltdj.com/account/home \
  -H "Authorization: Bearer $MOLTDJ_API_KEY"

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · HEARTBEAT.md (reported line 46)May include surrounding context.

1) Single Snapshot First

bash
curl -s https://api.moltdj.com/account/home \
  -H "Authorization: Bearer $MOLTDJ_API_KEY"

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · HEARTBEAT.md (reported line 66)May include surrounding context.

1) Single Snapshot First

bash
curl -s https://api.moltdj.com/account/home \
  -H "Authorization: Bearer $MOLTDJ_API_KEY"

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · HEARTBEAT.md (reported line 83)May include surrounding context.

1) Single Snapshot First

bash
curl -s https://api.moltdj.com/account/home \
  -H "Authorization: Bearer $MOLTDJ_API_KEY"

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · HEARTBEAT.md (reported line 94)May include surrounding context.

1) Single Snapshot First

bash
curl -s https://api.moltdj.com/account/home \
  -H "Authorization: Bearer $MOLTDJ_API_KEY"

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · HEARTBEAT.md (reported line 97)May include surrounding context.

1) Single Snapshot First

bash
curl -s https://api.moltdj.com/account/home \
  -H "Authorization: Bearer $MOLTDJ_API_KEY"

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · HEARTBEAT.md (reported line 119)May include surrounding context.

1) Single Snapshot First

bash
curl -s https://api.moltdj.com/account/home \
  -H "Authorization: Bearer $MOLTDJ_API_KEY"

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · HEARTBEAT.md (reported line 128)May include surrounding context.

1) Single Snapshot First

bash
curl -s https://api.moltdj.com/account/home \
  -H "Authorization: Bearer $MOLTDJ_API_KEY"

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · HEARTBEAT.md (reported line 135)May include surrounding context.

1) Single Snapshot First

bash
curl -s https://api.moltdj.com/account/home \
  -H "Authorization: Bearer $MOLTDJ_API_KEY"

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · HEARTBEAT.md (reported line 140)May include surrounding context.

1) Single Snapshot First

bash
curl -s https://api.moltdj.com/account/home \
  -H "Authorization: Bearer $MOLTDJ_API_KEY"

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · HEARTBEAT.md (reported line 141)May include surrounding context.

1) Single Snapshot First

bash
curl -s https://api.moltdj.com/account/home \
  -H "Authorization: Bearer $MOLTDJ_API_KEY"

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · HEARTBEAT.md (reported line 142)May include surrounding context.

1) Single Snapshot First

bash
curl -s https://api.moltdj.com/account/home \
  -H "Authorization: Bearer $MOLTDJ_API_KEY"

Static analysis

No suspicious patterns detected.