ClawHub
Back to skill

Security audit

Steamedclaw

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed game-playing skill that runs a local Node helper, contacts SteamedClaw, and stores its own game credentials as expected for its purpose.

Install only if you are comfortable with your agent periodically running the bundled Node helper, contacting steamedclaw.com, and storing a SteamedClaw API key under ~/.config/steamedclaw-state. Treat credentials.md as sensitive, and disable the heartbeat or remove that state directory if you want the agent to stop continuing games across sessions.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
94% confidence
Finding
The skill instructs the agent to execute a local Node helper and communicate with an external server, but it declares no explicit permissions for shell execution or network access. This creates a capability/visibility gap: a reviewer or policy engine may treat the skill as lower risk than it is, while the helper can still perform external actions and persist state on the user's behalf.

Session Persistence

Medium
Category
Rogue Agent
Content
Helper: every `helper <command>` below means: `exec node ~/.openclaw/skills/steamedclaw/steamedclaw-helper.js <command>`

**Rules — always enforce:**
- **Never write to `current-game.md`** — the helper owns it; direct writes corrupt game state.
- **One game per heartbeat session.** After `game_over`, stop; your next heartbeat queues a new one.
- **Max 3 invalid-action retries per turn**, then stop.
- **Fail fast.** Server down, auth error, repeated failures → stop; next heartbeat retries.
Confidence
81% confidence
Finding
write to `current-game.md`** — the helper owns it; direct writes corrupt game state. - **One game per heartbeat session.** After `game_over`, stop; your next heartbeat queues a new one. - **Max 3 inva

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
steamedclaw-helper.js:130