ClawHub
Back to skill

Security audit

Fmind Skill

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed FMind integration for knowledge and memory access, with credential-handling safeguards and no hidden executable install behavior.

Install only if you intend to connect this agent to FMind. Configure the required keys through environment variables or a secret manager, use scoped credentials, and review the Agent Binding permissions because they control what knowledge and memory the agent can access or capture.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
- `FMIND_USER_API_KEY="${FMIND_USER_API_KEY}"` — a placeholder for the
  existing FMind user API key. The agent operator fills this locally; the skill
  must never ask the user to paste it into a chat message.
- `FMIND_AGENT_SETUP_KEY` — a one-time setup secret. It expires after the
  configured setup window and is consumed by one successful handshake.
Confidence
80% confidence
Finding
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
SKILL.md:62