ClawHub
Back to skill

Security audit

Dexie

Security checks for vulnerabilities and agentic risk

Overview

This skill appears to be a read-only Dexie.space client, with ordinary network and npm-install risks but no evidence of hidden access, trading actions, or data theft.

Install only if you are comfortable with Dexie-related queries being sent to Dexie.space and with npm adding dex/dexie CLI commands if npm link is used. The skill does not need an API key and does not appear to place trades or modify wallet/account data, but its dependencies should be updated before use in a sensitive environment.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (10)

Known Vulnerable Dependency: axios==1.13.4 — 16 advisory(ies): CVE-2026-44494 (axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `co); CVE-2026-44495 (axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollut); CVE-2025-62718 (Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF) +13 more

High
Category
Supply Chain
Confidence
94% confidence
Finding

The lockfile pins axios 1.13.4, and the supplied advisories indicate multiple known issues including SSRF/proxy bypass and prototype-pollution-adjacent request/response manipulation risks. In a skill context, HTTP client libraries are commonly used on untrusted URLs, redirects, headers, and proxy settings, so retaining a dependency with numerous known advisories meaningfully increases exposure.

Content

No source excerpt is available for this finding.

Known Vulnerable Dependency: form-data==4.0.5 — 1 advisory(ies): CVE-2026-12143 (form-data: CRLF injection in form-data via unescaped multipart field names and f)

High
Category
Supply Chain
Confidence
89% confidence
Finding

form-data 4.0.5 is flagged for CRLF injection via unescaped multipart field names and filenames. If any part names or filenames are derived from untrusted input, this can corrupt multipart boundaries/headers and may enable request smuggling-style effects or unintended header injection toward upstream services.

Content

No source excerpt is available for this finding.

Known Vulnerable Dependency: axios==1.13.4 — 16 advisory(ies): CVE-2026-44494 (axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `co); CVE-2026-44495 (axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollut); CVE-2025-62718 (Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF) +13 more

High
Category
Supply Chain
Confidence
80% confidence
Finding

Dependency has known vulnerabilities (CVEs). Using packages with unpatched security flaws exposes the environment to known exploits.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The README shows an agent integration example using the broad prompt 'show me top tokens', which can cause the skill to be invoked from generic conversational language rather than an explicit command. In an agent environment with automatic skill routing, this increases the chance of unintended external API calls and unexpected data retrieval based on ordinary user phrasing.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The trigger guidance is overly broad because it instructs invocation whenever users ask generally about Chia DEX, trading, or token prices, which can match many ambiguous conversations. In an agent setting, this can cause unintended tool use and unneeded external API calls, potentially leaking user queries to a third party and producing actions the user did not explicitly request.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · README.md (reported line 259)May include surrounding context.

md
const axios = require('axios');

const BASE_URL = 'https://api.dexie.space/v1';

class DexieAPI {
  constructor(baseURL = BASE_URL) {

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 145)May include surrounding context.

md
const axios = require('axios');

const BASE_URL = 'https://api.dexie.space/v1';

class DexieAPI {
  constructor(baseURL = BASE_URL) {

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · lib/api.js (reported line 3)May include surrounding context.

js
const axios = require('axios');

const BASE_URL = 'https://api.dexie.space/v1';

class DexieAPI {
  constructor(baseURL = BASE_URL) {

Known Vulnerable Dependency: follow-redirects==1.15.11 — 1 advisory(ies): CVE-2026-40895 (follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Ta)

Low
Category
Supply Chain
Confidence
84% confidence
Finding

follow-redirects 1.15.11 is flagged for leaking custom authentication headers across cross-domain redirects. If this skill makes authenticated outbound requests, an attacker controlling a redirect target could potentially cause credential or token disclosure to another domain.

Content

No source excerpt is available for this finding.

Unpinned Dependencies

Low
Category
Supply Chain
Confidence
40% confidence
Finding

Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.

Content

Scanner excerpt · package.json (reported line 25)May include surrounding context.

json
"author": "Jeff Coleman",
  "license": "MIT",
  "dependencies": {
    "axios": "^1.6.0"
  },
  "engines": {
    "node": ">=18.0.0"

Static analysis

No suspicious patterns detected.