ClawHub
Back to skill

Security audit

Beaverhabits

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward Beaver Habits integration that reads habits and updates completions using a disclosed API token, with no hidden install or persistence behavior found.

Install only if you want the agent to access your Beaver Habits account and mark habits complete or incomplete. Keep BEAVERHABITS_API_KEY private, use the default service or a self-hosted SERVER_URL you trust over HTTPS, and phrase update requests clearly with the habit name and date.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill requires a permanent API token and optionally sends it to a user-configurable SERVER_URL, including self-hosted endpoints, but does not warn the user about the trust implications of that endpoint. This can lead to credential exposure if the server URL is misconfigured, malicious, or points to an untrusted proxy, especially because the token is long-lived.

Static analysis

No suspicious patterns detected.