Security audit

Real Estate Lead Qualifier

Security checks for vulnerabilities and agentic risk

Overview

The skill has a coherent real-estate lead-handling purpose, but it relies on an unpinned installer and overstates safety controls for regulated customer-facing booking workflows.

Review this skill carefully before installing. Run ThumbGate only from a verified, pinned version, avoid connecting production calendars/SMS accounts until enforcement is tested, and require manual review for Fair Housing-sensitive replies, budget exceptions, and pre-approval documents.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T08 · Insecure Dependencies

Warning

Location: setup-guide.md:3
Finding: Unpinned Third-Party Package Execution Through npx
Content: View full analysis
Remediation: View remediation
init --agent openclaw ``` 2. Publish and verify the expected package name, publisher identity, source repository, and cryptographic integrity information. 3. Include a lockfile and use a reproducible installation process such as `npm ci`. 4. Review the package source and lifecycle scripts before execution. 5. Prefer a locally declared, reviewed dependency instead of downloading and executing mutable code during setup. 6. Run initialization with least privilege in an isolated environment that does not contain unrelated credentials. 7. Document the files, environment variables, network endpoints, and permissions required by the dependency. 8. Add automated dependency monitoring and require security review before updating the pinned version. ]]>

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:16
Finding: Critical Fair Housing and Booking Controls Are Not Locally Enforced
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Rp1

Medium

Category: MCP Rug Pull
Confidence: 93% confidence
Finding: The setup guide instructs users to run npx thumbgate init --agent openclaw without pinning a specific package version. This allows whatever version is current at execution time to be fetched and run, which creates a supply-chain risk if a malicious or compromised release is published or if behavior changes unexpectedly.
Content: No source excerpt is available for this finding.