ClawHub
Back to skill

Security audit

rapidapi-launch-assistant

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward API launch checklist with reference notes and a small local markdown-generation script.

Review generated launch plans before publishing or running outreach, and invoke the script only with an intended input JSON and output markdown path. The skill may guide marketplace changes such as pricing, auth configuration, listings, and outreach, so users should approve those business actions explicitly.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Taint TrackingDirect Taint Flow, Variable-Mediated Taint Flow, Credential Exfiltration Chain
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
90% confidence
Finding
The skill references a local script and additional repository files, implying file read/write capability, but it does not declare any explicit tool scope or permission boundaries. In an agent environment, this can lead to over-broad tool access being inferred or granted implicitly, increasing the chance of unintended file access or modification beyond the skill's intended purpose.

Vague Triggers

Medium
Confidence
93% confidence
Finding
The description contains broad activation language such as 'use when a user wants to publish APIs, fix gateway/auth/test failures, configure plans, optimize listing conversion, run outreach, or package and sell an API-launch workflow skill,' which spans multiple loosely related tasks. Overly broad routing criteria can cause the skill to activate in situations outside its intended boundaries, leading to inappropriate file operations, script use, or business guidance being applied to unrelated requests.

Tainted flow: 'md' from pathlib.Path.read_text (line 21, file read) → pathlib.Path.write_text (file write)

Medium
Category
Data Flow
Content
5. Convert first paid users and collect feedback.
"""

out.write_text(md, encoding='utf-8')
print(f'Wrote {out}')
Confidence
65% confidence
Finding
Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.

Static analysis

No suspicious patterns detected.