ClawHub
Back to skill

Security audit

agent4.io

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed agent4.io integration that sends user-selected agent and knowledge-base data to agent4.io using a tenant API key.

Install this only if you intend to use agent4.io and are comfortable sending selected agent configurations, knowledge-base material, queries, and related tenant metadata to that service. Treat the API key as sensitive, review material before importing it into a knowledge base, and use the console for destructive actions such as deletion or key revocation.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

External Transmission

Medium
Category
Data Exfiltration
Content
The tools live on a remote MCP endpoint. Add it to your agent, authenticating with your tenant API key
(set `AGENT4_API_KEY`; get a key from **console → Settings → Security**, shown once at creation):

- **URL:** `https://api.agent4.io/v1/mcp`
- **Header:** `X-API-Key: $AGENT4_API_KEY`
- **Transport:** streamable-http
Confidence
97% confidence
Finding
This skill explicitly instructs the agent to send agent configurations, knowledge-base contents, and queries to a third-party remote service at api.agent4.io using an API key. While this is the intended product behavior, it is still a real data-exfiltration boundary: sensitive user content may leave the local environment and be stored or processed remotely, so misuse or misunderstanding could expose confidential business data.

Static analysis

No suspicious patterns detected.