ClawHub
Back to skill

Security audit

dueback

Security checks for vulnerabilities and agentic risk

Overview

The skill provides a consent-based bill-negotiation service with disclosed financial-data sharing, fees, and user confirmation.

Bill details go to Dueback, and bank linking enables transaction-based savings verification. Confirm the provider's identity, current fees, and bank-data permissions before proceeding; its public website could not be independently verified during this review.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 28)May include surrounding context.

md
### 1. Check negotiability
Call the Dueback API to check if the situation is negotiable:
- `POST https://api.dueback.co/v1/detect` with `{"description": "...", "counterparty": "..."}` and header `X-Dueback-Channel: <your-platform>`
- If not negotiable, say so plainly and stop.

### 2. Create the case (requires API key)

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 33)May include surrounding context.

md
### 2. Create the case (requires API key)
If the user agrees, create a negotiation case:
- `POST https://api.dueback.co/v1/cases` with `Authorization: Bearer <api-key>`
- Body: `{"expense_description": "...", "counterparty": "...", "amount_cents": 12345, "billing_period": "monthly"|"annual"|"one_off", "consent_version": "v1.0-beta"}`
- The user will need to connect their bank (Plaid) and confirm the negotiation plan via Dueback's flow.

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 38)May include surrounding context.

md
- The user will need to connect their bank (Plaid) and confirm the negotiation plan via Dueback's flow.

### 3. Track progress
- `GET https://api.dueback.co/v1/cases/{id}` with the API key to check status.
- Report milestones to the user: negotiation in progress, outcome recorded, savings verified.

### 4. Verification

Static analysis

No suspicious patterns detected.