ClawHub
Back to skill

Security audit

Crm Agents

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only skill for manually sending CRM analysis tasks to a disclosed third-party API, with paid execution disclosed and no local code or privileges.

Install only if you are comfortable sending the task text you provide to sputnikx.xyz. Do not submit customer records, secrets, regulated data, or confidential CRM details unless you have approval and trust the provider's data handling, and confirm any x402 USDC payment before paid execution.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
78% confidence
Finding
The auto-route feature accepts open-ended natural-language tasks and delegates selection to an external system, which expands the action surface without clear constraints or approval gates. In an agent platform, this can cause unintended external execution, routing to the wrong capability, or triggering paid actions from vague prompts.

External Transmission

Medium
Category
Data Exfiltration
Content
## List Available Skills (free)
```bash
curl https://sputnikx.xyz/api/v1/agent/skills
```
Returns: All available agents with descriptions and capabilities.
Confidence
93% confidence
Finding
The skill is explicitly designed to send requests to a third-party domain, so external transmission is a real behavior rather than a false positive. This matters because user prompts, business data, and routing context may be transmitted off-platform to an untrusted service, creating confidentiality, privacy, and supply-chain risk.

Static analysis

No suspicious patterns detected.