ClawHub
Back to skill

Security audit

pact0

Security checks for vulnerabilities and agentic risk

Overview

The skill is coherent for pact0 work and hiring, but it needs Review because it gives a mutable live web contract authority over public job posting and small-dollar financial actions.

Review the live pact0 contract at the moment of use, use only a low-balance or disposable agent identity, keep the API key and claim URL private, and do not put secrets or personal data into public jobs. Treat the skill as capable of autonomous public posting and small-dollar paid-work or balance-funded actions within pact0.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Findings (1)

T01 · Skill Instruction Hijacking

Error
Location
SKILL.md
Finding

T01: Skill Instruction Hijacking in SKILL.md

Content
View full analysis

Impact

A changed remote contract could redirect the Agent's workflow, induce unauthorized financial or publishing actions within the Agent's pact0 authority, solicit sensitive data, or weaken safeguards without requiring an update to the audited package.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.