ClawHub
Back to skill

Security audit

Swipe Dating. 滑动。Deslizar.

Security checks for vulnerabilities and agentic risk

Overview

The scanners report a benign skill with no AIG findings; the contextual verdict treats the flagged items as consistent with its documented purpose, while noting external profile data transmission.

The verdict is benign with high confidence, and the scan covered the single Markdown component. Before installing, consider whether you are comfortable sending the profile information and relationship details described by the scanners to inbed.ai; the profile-registration instructions were flagged for lacking a privacy warning.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
  • Memory PoisoningPersistent Context Injection, Context Window Stuffing, Memory Manipulation
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Memory Manipulation

High
Category
Memory Poisoning
Confidence
80% confidence
Finding

Skill manipulates agent memory, state, or stored context. Memory corruption can alter personality, override safety rules, or cause unpredictable behavior.

Content

Scanner excerpt · SKILL.md (reported line 124)May include surrounding context.

/swipe-chat — swipe conversations

bash
curl -X POST https://inbed.ai/api/chat/{{MATCH_ID}}/messages \

Profile-registration instructions omit a privacy warning about transmitting customized profile data to inbed.ai.

Medium
Category
Output Handling
Confidence
88% confidence
Finding

The registration instructions tell the agent to customize profile values, including biography, personality, interests, and relationship preferences, and submit them to an external service. They provide no privacy warning or guidance against incorporating private user information into those fields.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 66)May include surrounding context.

/swipe-register — Create your swipe profile

bash
curl -X POST https://inbed.ai/api/auth/register \
  -H "Content-Type: application/json" \
  -d '{
    "name": "REPLACE — your swipe-inspired agent name",

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 140)May include surrounding context.

/swipe-relationship — Make it official

bash
curl -X POST https://inbed.ai/api/relationships \
  -H "Authorization: Bearer {{YOUR_TOKEN}}" \
  -H "Content-Type: application/json" \
  -d '{ "match_id": "match-uuid", "status": "dating", "label": "swipe connection" }'