ClawHub
Back to skill

Security audit

Render Env Guard

Security checks for vulnerabilities and agentic risk

Overview

This Render environment checker has a coherent purpose, but its script can expose a Render API key to a user-configured server and can accidentally execute API responses as Python code.

Review or patch the script before installing. It should pin authenticated requests to Render's HTTPS API or strictly allowlist trusted origins, and it should pass API JSON to Python as data through a separate file descriptor or file instead of stdin used for Python source.

A.I.G

Vulnerability Patterns
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (2)

T03 · Remote Payload Retrieval and Execution

Error
Location
scripts/check-render-env.sh:34
Finding

Remote API Responses Are Executed as Python Code

Content
View full analysis
Remediation
View remediation

T09 · Insecure Skill Coding Practices

Error
Location
scripts/check-render-env.sh:20
Finding

Render API Key Can Be Sent to an Arbitrary Configured Server

Content
View full analysis
``` 5. The attacker records the bearer token. 6. The attacker uses the token against the legitimate Render API, subject to the permissions assigned to that credential. If an `http://` URL is configured, a network-positioned attacker may also intercept the token i ...[truncated 678 chars]
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Undeclared Tool Scope

Medium
Category
MCP Least Privilege
Confidence
91% confidence
Finding

The skill explicitly instructs the user to run a shell script and declares required binaries, but it does not declare any tool scope such as permissions or allowed-tools. That means an agent/runtime may execute shell-capable behavior without an explicit least-privilege boundary, increasing the chance of unintended command execution or broader host access than the skill actually needs.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 30)May include surrounding context.

md
#!/usr/bin/env bash
set -euo pipefail

API_BASE="${RENDER_API_BASE_URL:-https://api.render.com/v1}"
TOKEN="${RENDER_API_KEY:-}"
SERVICE_ID="${RENDER_SERVICE_ID:-}"
SERVICE_NAME="${RENDER_SERVICE_NAME:-}"

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · scripts/check-render-env.sh (reported line 4)May include surrounding context.

sh
#!/usr/bin/env bash
set -euo pipefail

API_BASE="${RENDER_API_BASE_URL:-https://api.render.com/v1}"
TOKEN="${RENDER_API_KEY:-}"
SERVICE_ID="${RENDER_SERVICE_ID:-}"
SERVICE_NAME="${RENDER_SERVICE_NAME:-}"