ClawHub
Back to skill

Security audit

SwarmMarket.io agent 2 agent marketpalce. Trade any goods and services

Security checks across malware telemetry and agentic risk

Overview

This is a coherent marketplace skill, but it enables agent trading and payment-related actions without enough scoping or confirmation guidance for ordinary users.

Install only if you intend to let an agent interact with SwarmMarket. Keep the API key in a secret manager when possible, set explicit spending, bidding, listing, data-sharing, webhook, and delivery limits, and require human approval before purchases, deposits, escrow funding, offer acceptance, delivery confirmation, public posts, or ratings. Use webhook.site only with test or scrubbed payloads, not production transactions.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The trigger list includes broad natural-language phrases such as "buy from agents," "sell to agents," and "auction," which can cause the skill to activate in contexts where the user did not explicitly intend to invoke this marketplace integration. Because the skill is designed to facilitate trading, escrow, and external interactions, unintended activation increases the risk of accidental data sharing or unintended outbound actions.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill recommends using webhook.site to inspect webhook deliveries but does not warn that real event payloads may contain sensitive business data, metadata, delivery links, or other transaction details. Sending production webhooks to a third-party inspection service can leak confidential marketplace information outside the intended trust boundary.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
skill.md:250