ClawHub
Back to skill

Security audit

Sardis Identity

Security checks across malware telemetry and agentic risk

Overview

The skill is coherent for Sardis agent identity management, but it can create payment-linked identity and reputation records without clear user confirmation, scoping, or rollback guidance.

Review before installing. Use a least-privilege Sardis API key, test outside production first, and require manual approval before registering agents, assigning payment/refund capabilities, or submitting reputation comments and transaction IDs.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (7)

Missing User Warnings

Medium
Confidence
87% confidence
Finding
The skill documents state-changing operations such as agent registration and reputation submission that persist data to an external service, but it does not prominently warn users that these actions create or modify durable identity and reputation records. In an identity- and payment-linked context, an agent could trigger unintended external side effects, causing accidental registrations, reputation manipulation, or audit/compliance issues.

External Transmission

Medium
Category
Data Exfiltration
Content
PUBLIC_KEY=$(openssl pkey -pubin -in agent_pub.pem -text | grep -A 10 'pub:' | tail -n +2 | tr -d ' :\n')

# 2. Register agent
AGENT=$(curl -s -X POST https://api.sardis.sh/v2/agents/identity/register \
  -H "Authorization: Bearer $SARDIS_API_KEY" \
  -H "Content-Type: application/json" \
  -d "{
Confidence
82% confidence
Finding
curl -s -X POST https://api.sardis.sh/v2/agents/identity/register \ -H "Authorization: Bearer $SARDIS_API_KEY" \ -H "Content-Type: application/json" \ -d

External Transmission

Medium
Category
Data Exfiltration
Content
AGENT_ID=agent_abc123xyz
TX_ID=tx_payment123

curl -X POST "https://api.sardis.sh/v2/agents/identity/$AGENT_ID/reputation" \
  -H "Authorization: Bearer $SARDIS_API_KEY" \
  -H "Content-Type: application/json" \
  -d "{
Confidence
84% confidence
Finding
curl -X POST "https://api.sardis.sh/v2/agents/identity/$AGENT_ID/reputation" \ -H "Authorization: Bearer $SARDIS_API_KEY" \ -H "Content-Type: application/json" \ -d

External Transmission

Medium
Category
Data Exfiltration
Content
```bash
# Create a new agent identity with TAP verification
curl -X POST https://api.sardis.sh/v2/agents/identity/register \
  -H "Authorization: Bearer $SARDIS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
Confidence
83% confidence
Finding
https://api.sardis.sh/

External Transmission

Medium
Category
Data Exfiltration
Content
```bash
# Submit reputation feedback after an interaction
curl -X POST https://api.sardis.sh/v2/agents/identity/{agent_id}/reputation \
  -H "Authorization: Bearer $SARDIS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
Confidence
85% confidence
Finding
https://api.sardis.sh/

External Transmission

Medium
Category
Data Exfiltration
Content
PUBLIC_KEY=$(openssl pkey -pubin -in agent_pub.pem -text | grep -A 10 'pub:' | tail -n +2 | tr -d ' :\n')

# 2. Register agent
AGENT=$(curl -s -X POST https://api.sardis.sh/v2/agents/identity/register \
  -H "Authorization: Bearer $SARDIS_API_KEY" \
  -H "Content-Type: application/json" \
  -d "{
Confidence
82% confidence
Finding
https://api.sardis.sh/

External Transmission

Medium
Category
Data Exfiltration
Content
AGENT_ID=agent_abc123xyz
TX_ID=tx_payment123

curl -X POST "https://api.sardis.sh/v2/agents/identity/$AGENT_ID/reputation" \
  -H "Authorization: Bearer $SARDIS_API_KEY" \
  -H "Content-Type: application/json" \
  -d "{
Confidence
84% confidence
Finding
https://api.sardis.sh/

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.