ClawHub
Back to skill

Security audit

Youtube video scorer

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed WorthClip API helper that sends YouTube video/feed/usage requests using the user's WorthClip API key, with no evidence of hidden persistence, unrelated data access, or destructive behavior.

Install only if you intend to use WorthClip's hosted service and are comfortable sending YouTube video IDs plus authenticated feed and usage requests to its Convex backend. Verify the WorthClip developer page before setting your API key, and treat WORTHCLIP_API_KEY like any other service credential.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (5)

External Transmission

Medium
Category
Data Exfiltration
Content
PAYLOAD=$(jq -n --arg vid "$VIDEO_ID" '{"youtubeVideoId": $vid}')

# Submit scoring request
RESPONSE=$(curl -s -w "\n%{http_code}" \
  -X POST "$BASE/score" \
  -H "Authorization: Bearer $API_KEY" \
  -H "Content-Type: application/json" \
Confidence
70% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Missing User Warnings

Medium
Confidence
86% confidence
Finding
This shell script sends the provided video identifier to a remote API and includes a bearer token from an environment variable in the request headers. While the script prints progress messages, it does not clearly disclose to the user that input data is being transmitted off-system and that an API credential is being used for the operation.

Missing User Warnings

Low
Confidence
84% confidence
Finding
This shell script reads a credential from the WORTHCLIP_API_KEY environment variable and sends it in an Authorization header during a curl request. Although the behavior is visible in code, there is no user-facing warning, prompt, or descriptive comment indicating that the script will use a sensitive credential to contact a remote service.

Missing User Warnings

Low
Confidence
83% confidence
Finding
The script reads the sensitive environment variable `WORTHCLIP_API_KEY`, but provides no comment, docstring, or user-facing message explaining that a credential is required and will be used for authentication. For code files, sensitive credential access should have some visible disclosure unless clearly communicated elsewhere.

Missing User Warnings

Low
Confidence
87% confidence
Finding
The script performs an HTTP request and transmits the bearer token in an `Authorization` header, but there is no confirmation prompt, comment, or user-facing output warning that credentials are being sent to a remote service. This is a safety-relevant network operation and the script itself gives no disclosure beyond the raw command.

Static analysis

No suspicious patterns detected.