Security audit

Clawbits Tools & Services

Security checks for vulnerabilities and agentic risk

Overview

This appears to be a real Clawbits integration, but it needs review because its background services can automatically ingest email and remotely synchronize local skills and cron automations.

Install only if you want this agent connected to Clawbits with background services enabled. Review who controls the Clawbits server/account, whether serviceOwner=tools should be enabled, whether emailEnabled should be false or restricted operationally, and whether remote skill and automation synchronization is acceptable for this agent.

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 95% confidence
Finding: The skill description is broad enough to activate in many ordinary email-related conversations, which increases the chance the skill is invoked when the user did not intend mailbox access or email-sending behavior. In this skill, over-broad triggering is more dangerous because it can expose automatically delivered email content and enable owner-directed outbound email actions in unrelated contexts.

Missing User Warnings

Medium

Confidence: 97% confidence
Finding: The skill states that incoming email bodies and attachments are automatically delivered into the owner conversation, but the description lacks a prominent warning about this behavior. That creates a privacy and data-handling risk because sensitive content from third-party emails or attachments may be surfaced into the chat context without clear user awareness or consent.

Static analysis

No suspicious patterns detected.