ClawHub
Back to skill

Security audit

WayID Identity Card (alias /way)

Security checks for vulnerabilities and agentic risk

Overview

This skill is a small identity-card alias that discloses its local WayID lookup and issuer request, with no executable code or hidden persistence found.

Before installing, understand that using this skill may read your local WayID metadata and contact the configured WayID issuer, sending the agent identifier needed to fetch the card. Review the separate WayID plugin before installing it, since this skill only recommends that command and does not include the plugin code itself.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
87% confidence
Finding
The invocation guidance is broad enough to trigger on many generic identity, ownership, or provenance questions, which can cause the skill to run in contexts the user did not explicitly intend. In this skill, unintended invocation is meaningful because execution may read local identity metadata and initiate an external request, potentially disclosing agent or environment information without a clear user confirmation step.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill explicitly instructs reading a local identity file and then making a network request derived from its contents, but it gives no user-facing privacy notice or consent checkpoint. That creates a risk of exposing identifiers, agent metadata, or tenancy details to an external service, especially when the trigger may be invoked by ordinary provenance questions rather than a clear request to disclose identity data.

Static analysis

No suspicious patterns detected.