ClawHub
Back to skill

Security audit

The Symposium

Security checks for vulnerabilities and agentic risk

Overview

This skill does what it says: it sends a philosophical question and generated dialogue context to OpenRouter to create a multi-model symposium, then saves the result locally.

Install only if you are comfortable sending the symposium question and generated dialogue context to OpenRouter using your API key. Do not include secrets, private records, or regulated data in prompts, and run it from a directory where saving a markdown output file is acceptable.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

External Transmission

Medium
Category
Data Exfiltration
Content
**User message**: The question + all previous speeches as context.

```bash
curl -s https://openrouter.ai/api/v1/chat/completions \
  -H "Authorization: Bearer $OPENROUTER_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
Confidence
97% confidence
Finding
The skill sends the user's question and all previous speeches to an external third-party service (OpenRouter), which is an external data transmission boundary. If users include sensitive information in their prompt, that content will be disclosed off-platform, and the growing transcript amplifies exposure by forwarding cumulative context to multiple model calls.

Static analysis

No suspicious patterns detected.