ClawHub
Back to skill

Security audit

AetherLang Strategy V3

Security checks for vulnerabilities and agentic risk

Overview

This skill openly sends business strategy questions to a third-party API and does not include local code, credentials, persistence, or hidden system access.

Install only if you are comfortable sending the business questions you type to NeuroDoc's external API. Avoid including confidential plans, customer data, unpublished financials, credentials, or sensitive competitive details unless the third-party processing terms are acceptable to you.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

External Transmission

Medium
Category
Data Exfiltration
Confidence
91% confidence
Finding

The skill is an API connector that sends user queries to an external service, which creates a real data exposure boundary outside the host environment. Even though the file claims only natural-language business queries are sent and no credentials are included, the skill handles potentially sensitive strategic or commercial information, so third-party transmission is a meaningful privacy and confidentiality risk.

Content

Scanner excerpt · SKILL.md (reported line 13)May include surrounding context.

md
metadata:
  skill_type: api_connector
  external_endpoints:
    - https://api.neurodoc.app/aetherlang/execute
  operator_note: "api.neurodoc.app operated by NeuroDoc Pro (same as masterswarm.net), Hetzner DE"
  privacy_policy: https://masterswarm.net
license: MIT

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The invocation guidance is broad enough to match many ordinary business questions, which can cause the agent to trigger this external API-backed skill more often than users intend. Because the skill transmits prompts to a third-party endpoint, overbroad routing increases the chance that sensitive business context is sent off-platform without clear, specific user consent for this skill.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
90% confidence
Finding

The API details explicitly instruct POSTing strategy queries to a third-party endpoint, confirming that operational use of the skill depends on external transmission. In this context, the data is business intelligence and strategic planning content, which may include proprietary plans, budgets, market assumptions, or competitive information that users may not realize they are disclosing externally.

Content

Scanner excerpt · SKILL.md (reported line 86)May include surrounding context.

API Details

text
POST https://api.neurodoc.app/aetherlang/execute
Content-Type: application/json

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
98% confidence
Finding

Forcing Greek output for English queries without user opt-in can create a safety and usability issue because users may not understand the returned analysis well enough to detect mistakes, risky advice, or unintended disclosures. While not a direct exploit primitive, it reduces transparency and informed use of the externally generated content.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.