ClawHub
Back to skill

Security audit

Spendex AI Router

Security checks across malware telemetry and agentic risk

Overview

This is an instruction-only Spendex integration that openly routes LLM prompts to an external AI routing service, so the main risk is privacy and account trust rather than hidden malware.

Install this only if you want Spendex to handle your LLM requests. Do not send secrets, regulated data, private customer content, or confidential code unless you trust Spendex and the selected downstream providers. Use scoped provider keys and billing limits where possible, and rotate keys if you stop using the service.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
95% confidence
Finding
The skill instructs the agent to route essentially any LLM-like user request through Spendex, which creates an overly broad trigger surface for transmitting user prompts to an external service. This increases the chance that ordinary or sensitive requests are sent off-platform without clear user awareness or task-specific consent.

Missing User Warnings

Medium
Confidence
98% confidence
Finding
The skill says to route user requests through Spendex but does not prominently warn that full prompts and conversation history may be transmitted to Spendex and then potentially onward to third-party model providers. Because it supports many providers and encourages sending full message arrays, users may unknowingly expose confidential, personal, or regulated data to external parties.

External Transmission

Medium
Category
Data Exfiltration
Content
env:
    - SPENDEX_API_KEY
  bins:
    - curl
    - jq
---
Confidence
93% confidence
Finding
curl - jq --- # Spendex AI Router Stop overpaying for AI. Spendex analyzes every prompt and routes it to the best model at the lowest cost — automatically. **Bring Your Own Keys** — connect you

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.