ClawHub
Back to skill

Security audit

liquid-local-leads

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward paid lead-search integration, with disclosed external API use and pricing, but users should treat its contact-data and payment examples carefully.

Before installing, confirm you are comfortable sending search parameters to Liquid Leads and paying per returned lead through x402. Use the exported contact data only where your outreach and retention practices comply with applicable privacy, marketing, and platform rules. For paid examples, prefer a trusted or pinned x402 client instead of blindly running the latest npm package through npx.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (11)

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 4)May include surrounding context.

md
---
name: liquid-local-leads
description: Find US local businesses to sell to (dentists, plumbers, HVAC, salons, law firms...) by category and place, with a checked email graded A/B/C, a contact name when the email shows one, phone, a website proven by the business's own phone number, socials and buying signals (no website, booking tool, payment system, hiring). $0.03 per lead over x402, no account, no API key.
homepage: "https://api.liquidagent.ai/v1/leads"

metadata:
  openclaw:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 14)May include surrounding context.

md
---
name: liquid-local-leads
description: Find US local businesses to sell to (dentists, plumbers, HVAC, salons, law firms...) by category and place, with a checked email graded A/B/C, a contact name when the email shows one, phone, a website proven by the business's own phone number, socials and buying signals (no website, booking tool, payment system, hiring). $0.03 per lead over x402, no account, no API key.
homepage: "https://api.liquidagent.ai/v1/leads"

metadata:
  openclaw:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 28)May include surrounding context.

md
---
name: liquid-local-leads
description: Find US local businesses to sell to (dentists, plumbers, HVAC, salons, law firms...) by category and place, with a checked email graded A/B/C, a contact name when the email shows one, phone, a website proven by the business's own phone number, socials and buying signals (no website, booking tool, payment system, hiring). $0.03 per lead over x402, no account, no API key.
homepage: "https://api.liquidagent.ai/v1/leads"

metadata:
  openclaw:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 29)May include surrounding context.

md
---
name: liquid-local-leads
description: Find US local businesses to sell to (dentists, plumbers, HVAC, salons, law firms...) by category and place, with a checked email graded A/B/C, a contact name when the email shows one, phone, a website proven by the business's own phone number, socials and buying signals (no website, booking tool, payment system, hiring). $0.03 per lead over x402, no account, no API key.
homepage: "https://api.liquidagent.ai/v1/leads"

metadata:
  openclaw:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 30)May include surrounding context.

md
---
name: liquid-local-leads
description: Find US local businesses to sell to (dentists, plumbers, HVAC, salons, law firms...) by category and place, with a checked email graded A/B/C, a contact name when the email shows one, phone, a website proven by the business's own phone number, socials and buying signals (no website, booking tool, payment system, hiring). $0.03 per lead over x402, no account, no API key.
homepage: "https://api.liquidagent.ai/v1/leads"

metadata:
  openclaw:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 35)May include surrounding context.

md
---
name: liquid-local-leads
description: Find US local businesses to sell to (dentists, plumbers, HVAC, salons, law firms...) by category and place, with a checked email graded A/B/C, a contact name when the email shows one, phone, a website proven by the business's own phone number, socials and buying signals (no website, booking tool, payment system, hiring). $0.03 per lead over x402, no account, no API key.
homepage: "https://api.liquidagent.ai/v1/leads"

metadata:
  openclaw:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 37)May include surrounding context.

md
---
name: liquid-local-leads
description: Find US local businesses to sell to (dentists, plumbers, HVAC, salons, law firms...) by category and place, with a checked email graded A/B/C, a contact name when the email shows one, phone, a website proven by the business's own phone number, socials and buying signals (no website, booking tool, payment system, hiring). $0.03 per lead over x402, no account, no API key.
homepage: "https://api.liquidagent.ai/v1/leads"

metadata:
  openclaw:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 59)May include surrounding context.

md
---
name: liquid-local-leads
description: Find US local businesses to sell to (dentists, plumbers, HVAC, salons, law firms...) by category and place, with a checked email graded A/B/C, a contact name when the email shows one, phone, a website proven by the business's own phone number, socials and buying signals (no website, booking tool, payment system, hiring). $0.03 per lead over x402, no account, no API key.
homepage: "https://api.liquidagent.ai/v1/leads"

metadata:
  openclaw:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 62)May include surrounding context.

md
---
name: liquid-local-leads
description: Find US local businesses to sell to (dentists, plumbers, HVAC, salons, law firms...) by category and place, with a checked email graded A/B/C, a contact name when the email shows one, phone, a website proven by the business's own phone number, socials and buying signals (no website, booking tool, payment system, hiring). $0.03 per lead over x402, no account, no API key.
homepage: "https://api.liquidagent.ai/v1/leads"

metadata:
  openclaw:

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
85% confidence
Finding

The skill is designed to collect and export business contact data for outreach and CRM use, including emails, phone numbers, contact names, and buying signals, but it provides no warning about privacy, consent, anti-spam, or lawful use constraints. This increases the risk of misuse for unsolicited outreach, improper data handling, or noncompliant processing.

Content

No source excerpt is available for this finding.

Rp1

Medium
Category
MCP Rug Pull
Confidence
92% confidence
Finding

The skill instructs users to run npx agentcash, which fetches and executes the latest package version at runtime without pinning or integrity verification. If the npm package or its dependency chain is compromised, users could execute attacker-controlled code on their system.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.