ClawHub
Back to skill

Security audit

Discord Server Admin

Security checks for vulnerabilities and agentic risk

Overview

This skill is a clearly scoped Discord administration helper, but it should be used only with a tightly permissioned bot because it can change server channels and roles.

Install only if you intend to let an agent administer Discord channels and roles. Use a dedicated bot with the minimum Discord permissions needed, avoid Administrator when practical, test in a non-production server first, and require explicit confirmation before deletes, role reorders, or role assignments.

SkillSpector

Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Lp3

Medium
Category
MCP Least Privilege
Confidence
90% confidence
Finding
The skill invokes a shell script and relies on an environment variable for a Discord bot token, but the skill manifest does not declare permissions for shell or environment access. This creates a security transparency gap: reviewers and runtime policy may underestimate the skill's actual capability to execute commands and handle secrets, increasing the risk of unintended command execution or token exposure.

Static analysis

No suspicious patterns detected.