T08 · Insecure Dependencies
Error
- Location
SKILL.md:30- Finding
Unpinned Third-Party Plugin Handles Dropbox Credentials and File Operations
- Content
View full analysis
- Remediation
View remediation
Security audit
Dropbox
Security checks for vulnerabilities and agentic risk
Overview
This Dropbox skill is coherent and not overtly malicious, but it asks users to install an unpinned third-party integration that can route credentials and perform high-impact Dropbox actions like deletion and public sharing.
Review ClawLink's publisher, privacy terms, token storage, and revocation controls before installing. Use the narrowest Dropbox permissions available, avoid highly sensitive folders unless approved by your organization, and require explicit confirmation before uploads, public link creation, sharing changes, member removals, contact deletion, or permanent deletes.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (5)
Credential Access
High
- Category
- Privilege Escalation
- Confidence
- 70% confidence
- Finding
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Content
md | Tool | Description | Risk | |------|-------------|------| | `dropbox_check_user` | Test API connection and validate access token | safe | | `dropbox_get_about_me` | Get current user's account info (email, name, type) | safe | | `dropbox_get_account` | Get account info by account ID | safe | | `dropbox_get_account_batch` | Get multiple accounts at once (max 300) | safe |
Context Leakage
High
- Category
- Data Exfiltration
- Confidence
- 85% confidence
- Finding
Code or instructions that leak agent conversation context to external services, potentially exposing sensitive user interactions.
- Content
md | Tool | Description | Risk | |------|-------------|------| | `dropbox_alpha_upload_file` | Upload file up to 150 MiB (alpha endpoint) | confirm | | `dropbox_append_upload_session` | Append data to upload session (max 150 MiB/request) | confirm | | `dropbox_append_upload_session_batch` | Append to multiple upload sessions at once | confirm | | `dropbox_finish_upload_session` | Finish upload session and save to path | confirm | | `dropbox_finish_upload_session_batch` | Finish multiple upload sessions at once | confirm |
Context Leakage
High
- Category
- Data Exfiltration
- Confidence
- 85% confidence
- Finding
Code or instructions that leak agent conversation context to external services, potentially exposing sensitive user interactions.
- Content
md | Tool | Description | Risk | |------|-------------|------| | `dropbox_alpha_upload_file` | Upload file up to 150 MiB (alpha endpoint) | confirm | | `dropbox_append_upload_session` | Append data to upload session (max 150 MiB/request) | confirm | | `dropbox_append_upload_session_batch` | Append to multiple upload sessions at once | confirm | | `dropbox_finish_upload_session` | Finish upload session and save to path | confirm | | `dropbox_finish_upload_session_batch` | Finish multiple upload sessions at once | confirm |
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
The skill explains that ClawLink brokers access to Dropbox but does not clearly warn that file contents, metadata, account information, and possibly shared-link targets are transmitted through a third-party service. That missing disclosure can mislead users about the privacy boundary and cause them to share sensitive data without informed consent.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The skill documents destructive and sharing-capable Dropbox actions such as delete, revoke, remove-member, and public link creation, but it does not pair them with an explicit warning about irreversible deletion, access removal, or unintended public exposure. In a chat-driven tool environment, that omission raises the chance of users invoking high-impact operations without understanding the consequences.
- Content