Security audit

Bios Deep Research

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed BIOS research API integration with optional crypto-payment setup, and its sensitive behaviors are purpose-aligned and user-directed.

Install only if you are comfortable sending research questions to BIOS and, if using x402, managing a dedicated low-balance wallet outside the agent. Prefer API-key auth or a managed/hardware signer, pin and review signer dependencies, and never paste a real wallet private key into source code or chat.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T08 · Insecure Dependencies

Warning

Location: references/x402-setup.md:31
Finding: Unpinned Third-Party Dependencies in Wallet-Signing Setup
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: references/x402-setup.md:55
Finding: Private-Key Example Encourages Embedding Wallet Secrets in Source Code
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (5)

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 42)May include surrounding context.
Set BIOS_API_KEY in your OpenClaw skill config. Base URL: https://api.ai.bio.xyz

bash
curl -sS -X POST https://api.ai.bio.xyz/deep-research/start \ -H "Authorization: Bearer $BIOS_API_KEY" \ -H "Content-Type: application/x-www-form-urlencoded" \ --data-urlencode "message=YOUR RESEARCH QUESTION" \

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 42)May include surrounding context.
Set BIOS_API_KEY in your OpenClaw skill config. Base URL: https://api.ai.bio.xyz

bash
curl -sS -X POST https://api.ai.bio.xyz/deep-research/start \ -H "Authorization: Bearer $BIOS_API_KEY" \ -H "Content-Type: application/x-www-form-urlencoded" \ --data-urlencode "message=YOUR RESEARCH QUESTION" \

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 133)May include surrounding context.
Set BIOS_API_KEY in your OpenClaw skill config. Base URL: https://api.ai.bio.xyz

bash
curl -sS -X POST https://api.ai.bio.xyz/deep-research/start \ -H "Authorization: Bearer $BIOS_API_KEY" \ -H "Content-Type: application/x-www-form-urlencoded" \ --data-urlencode "message=YOUR RESEARCH QUESTION" \

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 170)May include surrounding context.
Set BIOS_API_KEY in your OpenClaw skill config. Base URL: https://api.ai.bio.xyz

bash
curl -sS -X POST https://api.ai.bio.xyz/deep-research/start \ -H "Authorization: Bearer $BIOS_API_KEY" \ -H "Content-Type: application/x-www-form-urlencoded" \ --data-urlencode "message=YOUR RESEARCH QUESTION" \

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 184)May include surrounding context.
Set BIOS_API_KEY in your OpenClaw skill config. Base URL: https://api.ai.bio.xyz

bash
curl -sS -X POST https://api.ai.bio.xyz/deep-research/start \ -H "Authorization: Bearer $BIOS_API_KEY" \ -H "Content-Type: application/x-www-form-urlencoded" \ --data-urlencode "message=YOUR RESEARCH QUESTION" \

Static analysis

No suspicious patterns detected.