ClawHub
Back to skill

Security audit

Aicloset Skill

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent API documentation skill for an AI wardrobe service, but it can send personal photos and wardrobe history to the service.

Install only if you trust the AI Closet service with wardrobe data, personal images, and outfit history. Prefer the x-api-key header over query-string API keys, review actions before uploads or record creation, avoid sensitive or private image URLs, and check the provider's retention and deletion policies outside the skill docs.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (8)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill explicitly states that the API key is bound to a specific user identity and that uploaded clothing photos, wardrobe contents, and OOTD records are handled by a remote service, but it does not prominently warn users that these personal images and behavior data leave the local environment. This creates a real transparency and privacy risk because users may unknowingly disclose sensitive personal data to a third-party service tied to their account identity.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The virtual try-on API accepts a user-supplied model image URL and sends it to a remote service, but the documentation does not warn that personal images may be processed externally. This can lead to unintended disclosure of sensitive biometric or personal data because users and integrators are not informed about transmission, retention, or consent requirements.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The documentation explicitly describes submitting a daily outfit photo plus personal context such as city, weather, temperature, and date, but provides no privacy warning, consent guidance, retention notice, or sensitivity caveat. In a wardrobe/OOTD skill, these fields can reveal appearance, habits, and rough location/time patterns, so omission of user-facing privacy guidance is a real privacy/security weakness.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The API documentation instructs clients to upload clothing photos or supply image URLs for AI processing, including asynchronous recognition, but provides no privacy notice, consent guidance, retention policy, or warning that user images are transmitted to an external service. Clothing images can reveal sensitive personal information such as body shape, gender expression, location clues, or other background details, so omission of disclosure and data-handling guidance creates a real privacy and compliance risk.

External Transmission

Medium
Category
Data Exfiltration
Content
### 请求示例

```bash
curl -X POST https://aicloset-dev.wxbjq.top/skill/ai/virtual-tryon \
  -H "x-api-key: $AICLOSET_API_KEY" \
  -d "garment_image=https://example.com/dress.jpg"
```
Confidence
78% confidence
Finding
Although calling a remote API is expected, this specific endpoint processes image URLs for virtual try-on, which can involve personal photos and therefore sensitive user content. In this context, the undocumented external transmission of user-related imagery is materially riskier than a generic API example because it may expose personal data to third-party processing without clear disclosure.

External Transmission

Medium
Category
Data Exfiltration
Content
### 请求示例

```bash
curl -X POST https://aicloset-dev.wxbjq.top/skill/ootd/record-photo \
  -H "x-api-key: $AICLOSET_API_KEY" \
  -d "date=2026-03-23&image_url=https://example.com/ootd.jpg&city=北京&weather=晴"
```
Confidence
90% confidence
Finding
This endpoint example sends a user-supplied outfit photo URL and personal context to an external service, which constitutes transmission of potentially sensitive personal data. In the skill context, outfit photos can expose identity, home/work context, and behavioral patterns; the lack of any warning or data-handling constraints makes this materially risky.

External Transmission

Medium
Category
Data Exfiltration
Content
### 请求示例

```bash
curl -X POST https://aicloset-dev.wxbjq.top/skill/ootd/record-outfit \
  -H "x-api-key: $AICLOSET_API_KEY" \
  -d "date=2026-03-23&outfit_id=5&city=北京&weather=晴"
```
Confidence
83% confidence
Finding
This example transmits date, outfit association, and personal context such as city and weather to an external service, which can reveal user routines and location-linked behavior over time. While less sensitive than a photo upload, it still involves personal activity logging without any accompanying privacy notice or minimization guidance.

External Transmission

Medium
Category
Data Exfiltration
Content
### 请求示例（文件上传）

```bash
curl -X POST https://aicloset-dev.wxbjq.top/skill/product/add \
  -H "x-api-key: $AICLOSET_API_KEY" \
  -F "image=@shirt.jpg" \
  -F "wardrobe_id=1"
Confidence
86% confidence
Finding
This endpoint transmits user images or remote image URLs to an external service for AI processing, which materially increases privacy and security exposure compared with ordinary metadata submission. The skill context makes this more dangerous because photos of personal clothing may contain sensitive visual information, and accepting arbitrary image URLs can also enable risky server-side fetching behaviors unless constrained and documented.

Static analysis

No suspicious patterns detected.