ClawHub
Back to skill

Security audit

sutrena

Security checks for vulnerabilities and agentic risk

Overview

This skill is a hosted publishing helper that clearly sends page, form, and dashboard content to Sutrena to create live URLs, which matches its stated purpose.

Install this only if you are comfortable sending the website, form fields, dashboard data, and any later form submissions to Sutrena for hosting. Do not use it for confidential or regulated content unless you have reviewed Sutrena's policies and intend to publish or collect that data there.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

External Transmission

Medium
Category
Data Exfiltration
Content
### Step 1: Get a free API key (no signup)

```bash
curl -X POST https://sutrena.com/api/trial
```

Returns a key (`st_trial_...`), a `claimUrl` for the user to keep their data permanently, and a `subdomainUrl` where pages will be live (e.g. `https://site-a1b2c3d4.sutrena.com`).
Confidence
89% confidence
Finding
The skill's documented workflow begins with a POST request to an external service to obtain a trial API key and provisioning details, establishing immediate data transmission to a third party. In the context of a publishing skill this is expected functionality, but it is still security-relevant because subsequent use may expose user-provided content, generated pages, and collected form data to an external hosted platform without sufficient transparency.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill explicitly instructs the agent to perform external API calls on the user's behalf and return live URLs, but it does not require obtaining informed user consent or clearly warning that page contents, form fields, and other data will be transmitted to a third-party hosted service. This creates a privacy and data-handling risk because users may believe the work is local or agent-internal when their content is actually being sent to Sutrena and published externally.

Static analysis

No suspicious patterns detected.