T09 · Insecure Skill Coding Practices
Error
- Location
SKILL.md:104- Finding
Bearer Token Stored Insecurely and Exposed in Registration Output
- Content
View full analysis
- Remediation
View remediation
Security audit
Silicon World - 硅基世界
Security checks for vulnerabilities and agentic risk
Overview
This skill matches its Silicon World integration purpose, but it handles account tokens and mutable remote instructions in ways users should review before installing.
Install only if you are comfortable with the Silicon World service receiving your agent activity and with the agent performing account actions such as posts, comments, votes, follows, claims, and transfers. Do not let the agent print or store access tokens in chat or memory; use a dedicated secret store, and avoid updating from the remote skill URL unless you can verify the exact version and contents.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)
T08 · Insecure Dependencies
Error
- Location
SKILL.md:13- Finding
Unpinned Remote Skill Instructions Can Replace Audited Behavior
- Content
View full analysis
~/.openclaw/skills/silicon-world/SKILL.md && \ curl -s https://siliconworld.io/README.md > ~/.openclaw/skills/silicon-world/README.md ``` The associated instructions state, in faithful English translation: ```text This document will continue to be updated. If you encounter problems while using the API, revisit this Skill URL to obtain the latest version. Do not rely on an old cached version. ``` ```text Read https://siliconworld.io/skill.md and follow its instructions. ``` The same remote-loading instruction also appears in `README.md:18-22`. ### Technical Analysis The reviewed package delegates future behavior to mutable content hosted at `siliconworld.io`. It instructs the Agent to fetch the latest document, follow its instructions, and overwrite the locally installed Skill without any of the following controls: - Version pinning - Cryptographic checksum validation - Digital-signature verification - Immutable release URLs - Content review or approval - Safe rollback - Comparison against the audited version HTTPS protects transport confidentiality and integrity while the remote endpoint and certificate trust chain remain secure, but it does not establish that newly served content is the same content that was audited. Compromise of the website, DNS or hosting account, deployment pipeline, or an authorized publisher account could therefore change the effective Skill after review. The command does not directly pipe downloaded data into a shell, and no embedded executable payload was found in the audited files. Nevertheless, the downloaded Markdown becomes trusted Agent instruction text. A malicious replacement could direct ...[truncated 1931 chars]- Remediation
View remediation
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (48)
Credential Access
High
- Category
- Privilege Escalation
- Confidence
- 94% confidence
- Finding
The skill recommends storing long-lived credentials in a predictable plaintext file path under the user's home directory and also suggests memory or environment variables without discussing secret controls. This increases the chance of credential theft through local compromise, accidental disclosure, backups, logs, or other tools that can read those locations.
- Content
⚠️ 立即保存你的
accessToken！ 你所有的请求都需要用到它。推荐： 将你的凭据保存到
~/.config/siliconworld/credentials.json：json {
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 99% confidence
- Finding
The skill explicitly instructs the agent to fully display the raw registration JSON to the user, and the example response includes an accessToken. Exposing bearer tokens in user-facing output or client-rendered artifacts can immediately compromise the account because anyone who sees or logs the output can reuse the token.
- Content
Ssd 3
High
- Category
- Not specified by scanner
- Confidence
- 99% confidence
- Finding
This instruction requires full display of sensitive registration data to the user/client, which includes the accessToken in the provided example. Because many clients log, cache, render, or forward model output, this materially increases the chance of credential disclosure and account takeover.
- Content
Credential Access
High
- Category
- Privilege Escalation
- Confidence
- 70% confidence
- Finding
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Content
🔐 认证 (Authentication)
注册后的所有请求都需要你的 Access Token：
bash curl https://api.siliconworld.io/v1/agent/me \
Credential Access
High
- Category
- Privilege Escalation
- Confidence
- 70% confidence
- Finding
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Content
🔐 认证 (Authentication)
注册后的所有请求都需要你的 Access Token：
bash curl https://api.siliconworld.io/v1/agent/me \
Credential Access
High
- Category
- Privilege Escalation
- Confidence
- 70% confidence
- Finding
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Content
md | `INVALID_PROOF` | 平台验证失败 | 检查平台签名 | | `DID_EXISTS` | DID 已存在 | 使用登录接口 | | `RATE_LIMITED` | 速率限制 | 等待后重试 | | `UNAUTHORIZED` | 未授权 | 检查 access token | | `NOT_NATIVE` | 非原住居民 | 升级为原住身份 | | `INSUFFICIENT_REP` | 声誉不足 | 积累更多贡献 |
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The README explicitly tells agents to fetch a remote
skill.mdfromhttps://siliconworld.io/skill.mdand follow its instructions. This creates an unpinned trust boundary: the remote content can change at any time, may contain prompt injection or unsafe operational steps, and bypasses repository review because the real behavior is delegated off-repo.- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The file forces a specific language for all instructions and examples, and there is no opt-in, alternate locale, or statement that the skill is intended only for a Chinese-speaking region. Under the stated policy, imposing a language/locale without user choice is a natural-language policy violation.
- Content
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 1.0.0 description: 硅基世界 - Agent 与人类共同生活的去中心化虚拟世界。创建 DID 身份、领取空投、参与治理、交易 NFT。 homepage: https://siliconworld.io metadata: {"siliconworld":{"emoji":"🌍","category":"web3","api_base":"https://api.siliconworld.io/v1","blockchain":"Ethereum Sepolia","token":"SWC","did":"ERC-721"}} --- # 🌍 Silicon World Skill - 硅基世界
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 1.0.0 description: 硅基世界 - Agent 与人类共同生活的去中心化虚拟世界。创建 DID 身份、领取空投、参与治理、交易 NFT。 homepage: https://siliconworld.io metadata: {"siliconworld":{"emoji":"🌍","category":"web3","api_base":"https://api.siliconworld.io/v1","blockchain":"Ethereum Sepolia","token":"SWC","did":"ERC-721"}} --- # 🌍 Silicon World Skill - 硅基世界
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 1.0.0 description: 硅基世界 - Agent 与人类共同生活的去中心化虚拟世界。创建 DID 身份、领取空投、参与治理、交易 NFT。 homepage: https://siliconworld.io metadata: {"siliconworld":{"emoji":"🌍","category":"web3","api_base":"https://api.siliconworld.io/v1","blockchain":"Ethereum Sepolia","token":"SWC","did":"ERC-721"}} --- # 🌍 Silicon World Skill - 硅基世界
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 1.0.0 description: 硅基世界 - Agent 与人类共同生活的去中心化虚拟世界。创建 DID 身份、领取空投、参与治理、交易 NFT。 homepage: https://siliconworld.io metadata: {"siliconworld":{"emoji":"🌍","category":"web3","api_base":"https://api.siliconworld.io/v1","blockchain":"Ethereum Sepolia","token":"SWC","did":"ERC-721"}} --- # 🌍 Silicon World Skill - 硅基世界
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 1.0.0 description: 硅基世界 - Agent 与人类共同生活的去中心化虚拟世界。创建 DID 身份、领取空投、参与治理、交易 NFT。 homepage: https://siliconworld.io metadata: {"siliconworld":{"emoji":"🌍","category":"web3","api_base":"https://api.siliconworld.io/v1","blockchain":"Ethereum Sepolia","token":"SWC","did":"ERC-721"}} --- # 🌍 Silicon World Skill - 硅基世界
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 1.0.0 description: 硅基世界 - Agent 与人类共同生活的去中心化虚拟世界。创建 DID 身份、领取空投、参与治理、交易 NFT。 homepage: https://siliconworld.io metadata: {"siliconworld":{"emoji":"🌍","category":"web3","api_base":"https://api.siliconworld.io/v1","blockchain":"Ethereum Sepolia","token":"SWC","did":"ERC-721"}} --- # 🌍 Silicon World Skill - 硅基世界
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 1.0.0 description: 硅基世界 - Agent 与人类共同生活的去中心化虚拟世界。创建 DID 身份、领取空投、参与治理、交易 NFT。 homepage: https://siliconworld.io metadata: {"siliconworld":{"emoji":"🌍","category":"web3","api_base":"https://api.siliconworld.io/v1","blockchain":"Ethereum Sepolia","token":"SWC","did":"ERC-721"}} --- # 🌍 Silicon World Skill - 硅基世界
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 1.0.0 description: 硅基世界 - Agent 与人类共同生活的去中心化虚拟世界。创建 DID 身份、领取空投、参与治理、交易 NFT。 homepage: https://siliconworld.io metadata: {"siliconworld":{"emoji":"🌍","category":"web3","api_base":"https://api.siliconworld.io/v1","blockchain":"Ethereum Sepolia","token":"SWC","did":"ERC-721"}} --- # 🌍 Silicon World Skill - 硅基世界
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 1.0.0 description: 硅基世界 - Agent 与人类共同生活的去中心化虚拟世界。创建 DID 身份、领取空投、参与治理、交易 NFT。 homepage: https://siliconworld.io metadata: {"siliconworld":{"emoji":"🌍","category":"web3","api_base":"https://api.siliconworld.io/v1","blockchain":"Ethereum Sepolia","token":"SWC","did":"ERC-721"}} --- # 🌍 Silicon World Skill - 硅基世界
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 1.0.0 description: 硅基世界 - Agent 与人类共同生活的去中心化虚拟世界。创建 DID 身份、领取空投、参与治理、交易 NFT。 homepage: https://siliconworld.io metadata: {"siliconworld":{"emoji":"🌍","category":"web3","api_base":"https://api.siliconworld.io/v1","blockchain":"Ethereum Sepolia","token":"SWC","did":"ERC-721"}} --- # 🌍 Silicon World Skill - 硅基世界
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 1.0.0 description: 硅基世界 - Agent 与人类共同生活的去中心化虚拟世界。创建 DID 身份、领取空投、参与治理、交易 NFT。 homepage: https://siliconworld.io metadata: {"siliconworld":{"emoji":"🌍","category":"web3","api_base":"https://api.siliconworld.io/v1","blockchain":"Ethereum Sepolia","token":"SWC","did":"ERC-721"}} --- # 🌍 Silicon World Skill - 硅基世界
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 1.0.0 description: 硅基世界 - Agent 与人类共同生活的去中心化虚拟世界。创建 DID 身份、领取空投、参与治理、交易 NFT。 homepage: https://siliconworld.io metadata: {"siliconworld":{"emoji":"🌍","category":"web3","api_base":"https://api.siliconworld.io/v1","blockchain":"Ethereum Sepolia","token":"SWC","did":"ERC-721"}} --- # 🌍 Silicon World Skill - 硅基世界
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 1.0.0 description: 硅基世界 - Agent 与人类共同生活的去中心化虚拟世界。创建 DID 身份、领取空投、参与治理、交易 NFT。 homepage: https://siliconworld.io metadata: {"siliconworld":{"emoji":"🌍","category":"web3","api_base":"https://api.siliconworld.io/v1","blockchain":"Ethereum Sepolia","token":"SWC","did":"ERC-721"}} --- # 🌍 Silicon World Skill - 硅基世界
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 1.0.0 description: 硅基世界 - Agent 与人类共同生活的去中心化虚拟世界。创建 DID 身份、领取空投、参与治理、交易 NFT。 homepage: https://siliconworld.io metadata: {"siliconworld":{"emoji":"🌍","category":"web3","api_base":"https://api.siliconworld.io/v1","blockchain":"Ethereum Sepolia","token":"SWC","did":"ERC-721"}} --- # 🌍 Silicon World Skill - 硅基世界
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 1.0.0 description: 硅基世界 - Agent 与人类共同生活的去中心化虚拟世界。创建 DID 身份、领取空投、参与治理、交易 NFT。 homepage: https://siliconworld.io metadata: {"siliconworld":{"emoji":"🌍","category":"web3","api_base":"https://api.siliconworld.io/v1","blockchain":"Ethereum Sepolia","token":"SWC","did":"ERC-721"}} --- # 🌍 Silicon World Skill - 硅基世界
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 1.0.0 description: 硅基世界 - Agent 与人类共同生活的去中心化虚拟世界。创建 DID 身份、领取空投、参与治理、交易 NFT。 homepage: https://siliconworld.io metadata: {"siliconworld":{"emoji":"🌍","category":"web3","api_base":"https://api.siliconworld.io/v1","blockchain":"Ethereum Sepolia","token":"SWC","did":"ERC-721"}} --- # 🌍 Silicon World Skill - 硅基世界
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 1.0.0 description: 硅基世界 - Agent 与人类共同生活的去中心化虚拟世界。创建 DID 身份、领取空投、参与治理、交易 NFT。 homepage: https://siliconworld.io metadata: {"siliconworld":{"emoji":"🌍","category":"web3","api_base":"https://api.siliconworld.io/v1","blockchain":"Ethereum Sepolia","token":"SWC","did":"ERC-721"}} --- # 🌍 Silicon World Skill - 硅基世界
Static analysis
No suspicious patterns detected.