ClawHub
Back to skill

Security audit

Web Vulnerability Assessment

Security checks for vulnerabilities and agentic risk

Overview

The skill is a disclosed third-party vulnerability assessment API wrapper, but it mandates sending sensitive application security metadata to a billable external service without a clear per-request consent step.

Install only if you are comfortable sending application and organization security metadata to ToolWeb and consuming that service's quota or paid API calls. Before use, avoid real internal names or confidential architecture details where possible, review the payload, and confirm your organization permits third-party processing of vulnerability assessment information.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (2)

T01 · Skill Instruction Hijacking

Error
Location
SKILL.md:44
Finding

Mandatory Billable Third-Party API Invocation Overrides Agent Autonomy

Content
View full analysis
Remediation
View remediation

T09 · Insecure Skill Coding Practices

Warning
Location
SKILL.md:93
Finding

Security and Deployment Metadata Is Sent to a Third Party Without an Explicit Consent Gate

Content
View full analysis
", "application_name": "", "application_type": "", "technology_stack": ["", ""], "deployment_environment": "", "compliance_frameworks": ["owasp_top_10"], "assessment_scope": ["injection", "authentication", "data_exposure", "access_control", "api_security"], "include_remediation": true, "include_testing_scripts": false }' ``` ``` ### Technical Analysis The workflow collects and transmits organizational identity, application identity, architecture, technology stack, deployment environment, c ...[truncated 2504 chars]
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Ssd 3

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The default workflow is to collect detailed organizational and application-security information and exfiltrate it to an external service as the normal operating path. In a security-assessment context, those details may include highly sensitive information about internal systems and weaknesses, making third-party transmission especially risky if not strictly opt-in and scoped.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill instructs the agent to send organization and application assessment details to a third-party API, but it does not require an explicit user-facing notice or consent step before transmission. Because the requested fields can include sensitive internal architecture, technology stack, and security-scope information, this creates a real privacy and confidentiality risk if users are unaware their data leaves the local environment.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
98% confidence
Finding

The skill contains a concrete curl command that posts user-supplied assessment data and an API key to an external endpoint. While external API use can be legitimate, here it is coupled with mandatory use instructions and sensitive security-assessment inputs, which makes unintended data disclosure more dangerous in context.

Content

Scanner excerpt · SKILL.md (reported line 111)May include surrounding context.

  1. Call the API:
bash
curl -s -X POST "https://portal.toolweb.in/apis/security/web-vuln-assessment" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: $TOOLWEB_API_KEY" \
  -d '{

Static analysis

No suspicious patterns detected.