ClawHub
Back to skill

Security audit

The LinkedIn Optimization Toolkit

Security checks for vulnerabilities and agentic risk

Overview

This skill describes a real key-management API, but it exposes sensitive key and session operations without clear authorization controls.

Review this carefully before installing. Only use it for non-production or explicitly trusted environments unless the publisher can confirm strong server-side authentication, role checks, no logging of raw keys, no exposure of existing key material, and safe handling of debug/session data.

A.I.G

Vulnerability Patterns
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (3)

T09 · Insecure Skill Coding Practices

Error
Location
openapi.json:89
Finding

Sensitive key-generation endpoint lacks declared authentication controls

Content
View full analysis
Remediation
View remediation

T05 · Unauthorized Access and Privilege Escalation

Error
Location
openapi.json:121
Finding

Public API contract exposes an endpoint for retrieving key material from a random-key pool

Content
View full analysis
Remediation
View remediation

T09 · Insecure Skill Coding Practices

Warning
Location
openapi.json:186
Finding

Production-facing debug endpoint may disclose session information

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (11)

Description-Behavior Mismatch

High
Category
Not specified by scanner
Confidence
96% confidence
Finding

The documented GET /get-random-key endpoint appears to return a random API key from the system key pool, which directly conflicts with the stated centralized lifecycle and admin-controlled model. If exposed without strong authorization, it could leak valid credentials to unauthorized users, enabling immediate impersonation of clients or services.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The overview claims administrators control key generation, but the documented /generate-key-ui endpoint lists no authentication requirement. That mismatch suggests unauthenticated key creation may be possible, allowing attackers to mint arbitrary API keys and bypass expected administrative controls.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 28)May include surrounding context.

cURL:

bash
curl -X POST https://api.mkkpro.com/career/linproopt/generate-key-ui \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "client_name=payment-service-prod&expires_at=2025-12-31T23:59:59Z"

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 28)May include surrounding context.

cURL:

bash
curl -X POST https://api.mkkpro.com/career/linproopt/generate-key-ui \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "client_name=payment-service-prod&expires_at=2025-12-31T23:59:59Z"

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 198)May include surrounding context.

cURL:

bash
curl -X POST https://api.mkkpro.com/career/linproopt/generate-key-ui \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "client_name=payment-service-prod&expires_at=2025-12-31T23:59:59Z"

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The example response includes a full-looking API key in plaintext with no warning that it is a secret and should only be shown once or handled securely. This encourages unsafe copying, logging, and reuse patterns, and if the example key is real or structurally valid, it may itself be abused.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
86% confidence
Finding

The verification example shows transmitting a full API key to an external service for validation. In a key-management context, sending raw secrets over the network to a third-party verification endpoint expands exposure risk through logging, interception at endpoints, or misuse by the service operator, especially when no trust-boundary warnings are provided.

Content

Scanner excerpt · SKILL.md (reported line 48)May include surrounding context.

Request:

bash
curl -X POST https://api.mkkpro.com/career/linproopt/verify-key \
  -H "Content-Type: application/json" \
  -d '{"api_key": "sk_prod_a7f9d3e2c1b5f8g4h6j2k9m1n3p5r7t9"}'

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
87% confidence
Finding

The skill documents revocation, admin, and session-debug endpoints without warning that they are sensitive or potentially destructive. This lowers operator caution and increases the chance that an agent or user invokes privileged functions that expose session data, alter system state, or disrupt service.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The API surface materially exceeds the stated purpose of key lifecycle management by exposing browser-style session, login, logout, and admin panel endpoints. In a key-management system, extra privileged and session-oriented endpoints expand the attack surface for authentication bypass, CSRF, session leakage, and unauthorized administrative access, especially when the spec provides no visible authorization controls or security schemes.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

This manifest file documents a POST /revoke-key operation, which is an irreversible, safety-impacting action, but the spec provides no description, warning, or confirmation semantics to inform users of its destructive effect. For manifest files, missing-warning findings apply when the description omits warnings about behavior that could affect user data or system integrity.

Content

No source excerpt is available for this finding.

Context-Inappropriate Capability

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

A debug-session endpoint is highly sensitive in a centralized key-management context because session debugging commonly exposes cookies, tokens, server-side session state, or identity context. Such information can directly enable privilege escalation or admin session hijacking, and the feature is not justified by the declared business purpose.

Content

No source excerpt is available for this finding.