ClawHub
Back to skill

Security audit

Create a linkinbio page on pawr.link fast

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward guide for creating or updating a pawr.link profile, with the external API calls and USDC charges disclosed in the artifact.

Before using this skill, review the curl payload because it sends wallet address, username, display name, bio, avatar URL, and link data to pawr.link and may charge $19 USDC to create a profile or $0.10 USDC to update one. Only run it when you intend to publish or change that profile and are comfortable with the payment and public content changes.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

External Transmission

Medium
Category
Data Exfiltration
Content
---
name: skill-x402-fast
description: Fastest way to create or update a pawr.link profile. One curl command, $19 USDC to create, $0.10 to update. Patch-style update-links endpoint lets you add, remove, or move individual links without replacing the whole profile.
metadata:
  clawdbot:
    emoji: "🐾"
Confidence
89% confidence
Finding
This skill is designed to send user-supplied data to an external domain via curl, including wallet and profile information. While the transmission appears to be the intended functionality, it still represents a real security/privacy risk if the skill is invoked without clearly disclosing the outbound data flow and payment side effects.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill instructs users to submit a wallet address and profile content to an external service and explicitly states that x402 payment is handled automatically, but it does not present this as a clear safety warning before the action. That omission can cause users or agents to trigger paid transactions and disclose profile-associated data without informed consent, which is especially risky in an automation context.