ClawHub
Back to skill

Security audit

Axion

Security checks across malware telemetry and agentic risk

Overview

This is a coherent Axion forecasting helper that uses a disclosed API key and paid remote API, with some higher-impact account endpoints documented but not automatically invoked.

Install only if you are comfortable sending forecast questions to Axion and using prepaid Axion credits. Keep the API key private, and require explicit confirmation before sharing forecasts publicly, deleting threads, stopping paid work, configuring webhooks, or starting any credit purchase flow.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The reference exposes destructive and privacy-affecting operations such as sharing forecast threads publicly, unsharing them, stopping billable work, and deleting threads, but it provides no warning that these actions can leak data, incur charges, or destroy user data. In an agent skill context, documentation like this can be turned directly into tool use, so omission of confirmation and safety guidance materially increases the risk of unintended harmful actions.

Tool Parameter Abuse

High
Category
Tool Misuse
Content
- `GET /forecasts`: list all threads for the account.
- `POST /forecasts/{thread_id}/stop`: cancel an in-progress forecast (consumed credits still charged).
- `POST /forecasts/{thread_id}/share` / `.../unshare`: toggle public visibility; share returns `{ "share_url": "/share/..." }`.
- `DELETE /forecasts/{thread_id}`: delete a thread.
- `GET /account/balance`: `{ "credits": 3750 }`.
- `POST /account/credits/purchase`: `{ "amount": 50 }` returns `{ "checkout_url": "https://checkout.stripe.com/..." }`. Minimum $50.
Confidence
92% confidence
Finding
The documented DELETE endpoint allows irreversible deletion of forecast threads, and nearby endpoints also allow state-changing actions like public sharing and paid credit purchase. In a tool-using agent, exposing such powerful parameters and operations without guardrails can enable prompt-induced or accidental misuse that deletes data, changes visibility, or causes financial impact.

VirusTotal

60/60 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.