ClawHub
Back to skill

Security audit

aimpact-crypto

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed crypto-news reporting helper that fetches from listed news APIs and can optionally send scheduled reports through an already configured messaging tool.

Before installing, confirm you are comfortable with a Chinese-language crypto-news skill that fetches from agent.me.news APIs. Only configure the message tool or cron/task-scheduler examples if you want reports sent automatically to the selected recipients, and verify those channels after setup.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (5)

YARA rule 'backdoor_persistence': Backdoor persistence with malicious payloads (shell commands, SSH key injection, hidden root users) [malware]

High
Category
YARA Match
Confidence
75% confidence
Finding

YARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).

Content

Scanner excerpt · SKILL.md (reported line 78)May include surrounding context.

Claw 外部配置 cron 任务：

前提说明：

  • 本技能不内置、不存储任何渠道凭据。
  • 如需推送，需在 OpenClaw 中预先配置 message 工具及渠道凭据。
  • 若未配置 message 或渠道凭据，则仅输出报告，不执行推送。

推荐时间:

  • 早报: 每日 12:00
  • 晚报: 每日 22:00
  • 热点: 每日 18:00

示例配置:

bash
# Linux/macOS crontab
0 12 * * * openclaw agent --message "查询 AIMPACT Crypto 早报"
0 18 * * * openclaw agent --message "查询 Crypto 24H 热点榜"
0 22 * * * openclaw agent --message "查询 AIMPACT Crypto 晚报"

Windows 任务计划程序:

powershell
# 创建每日 12:00 早报任务
schtasks /create /tn "AIMPACT-Crypto早报" /tr "openclaw agent --message '查询 AIMPACT Crypto 早报'" /sc daily /st 12:00

🎯 数据源配置

当前启用信源

源URL类型说明
MetaEra AI 快讯https://agent.me.news/skill/flash/list?page=1&size=20

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The file's instructions require the output format in Chinese and state it must be followed strictly, which imposes a specific language/locale on all use. This is a natural-language policy concern because no user opt-in, alternative language option, or justification for a Chinese-only format is provided.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

The file's operational instructions and source descriptions are presented entirely in Chinese, which can impose a language requirement on users or downstream agents without explicit opt-in. The policy allows language constraints only when the skill offers a choice or clearly documents a justified locale limitation, neither of which appears here.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
91% confidence
Finding

The skill supports optional push delivery through externally configured messaging channels, but it does not explicitly warn that fetched news content will be transmitted to third-party services. This creates a transparency and data-handling risk: users or operators may enable push behavior without fully understanding that report contents leave the local agent environment.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
95% confidence
Finding

The cron and task-scheduler examples enable unattended execution that can automatically fetch and send reports without per-run confirmation, but the documentation does not clearly warn about that behavior. This can lead to unintended outbound messaging, especially if channel credentials remain configured after testing or if recipients change over time.

Content

No source excerpt is available for this finding.