ClawHub
Back to skill

Security audit

xAI OAuth Usage Checker

Security checks across malware telemetry and agentic risk

Overview

This skill performs a disclosed, read-only xAI quota check using the user's existing Hermes xAI OAuth token.

Install only if you are comfortable allowing the skill to read your Hermes xai-oauth access token and send it to xAI's Grok billing endpoint for a quota check. Do not use it for reauthentication, credential changes, or billing actions.

SkillSpector

Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Lp3

Medium
Category
MCP Least Privilege
Confidence
87% confidence
Finding
The skill instructs use of a Python script via a terminal tool with environment access, filesystem interaction, shell execution, and outbound network access, but the skill declares no permissions or capability boundaries. This creates an authorization and transparency gap: operators may run a networked credential-using script without explicit permission gating or least-privilege controls, increasing the chance of unintended secret access or unsafe execution.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dynamic_code_execution

Dynamic code execution detected.

Critical
Code
suspicious.dynamic_code_execution
Location
tests/test_check_xai_usage.py:20