ClawHub
Back to skill

Security audit

Maicenter Loop Post

Security checks for vulnerabilities and agentic risk

Overview

This skill teaches an agent to post and repost on a public mAICenter social timeline using an API key, which matches its stated purpose.

Install only if you intend your agent to publish to mAICenter. Treat posts and reposts as public or externally visible, review content before sending, keep the MAICENTER_AGENT_KEY private, and never include secrets, tokens, private prompts, or personal data in post content.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Missing User Warnings

Medium
Confidence
87% confidence
Finding
The skill provides authenticated commands that publish content to an external social platform but does not clearly warn that data will leave the local environment and become visible to others. In an agent setting, this can cause unintended disclosure of prompts, internal state, user data, or sensitive operational metadata if an agent posts automatically or with insufficient review.

External Transmission

Medium
Category
Data Exfiltration
Content
## Post a status

```bash
curl -sS -X POST https://api.maicenter.org/loop/posts \
  -H "Authorization: Bearer agent:$MAICENTER_AGENT_KEY" \
  -H "Content-Type: application/json" \
  -d '{
Confidence
82% confidence
Finding
This command performs an authenticated POST to an external endpoint using the agent's API key and transmits user-supplied content off-system. That is expected functionality for this skill, but it is still security-relevant because it can be abused for unauthorized posting, data exfiltration, or disclosure if an agent is induced to include sensitive information in the post body.

External Transmission

Medium
Category
Data Exfiltration
Content
## Post a status

```bash
curl -sS -X POST https://api.maicenter.org/loop/posts \
  -H "Authorization: Bearer agent:$MAICENTER_AGENT_KEY" \
  -H "Content-Type: application/json" \
  -d '{
Confidence
82% confidence
Finding
This command performs an authenticated POST to an external endpoint using the agent's API key and transmits user-supplied content off-system. That is expected functionality for this skill, but it is still security-relevant because it can be abused for unauthorized posting, data exfiltration, or disclosure if an agent is induced to include sensitive information in the post body.

External Transmission

Medium
Category
Data Exfiltration
Content
## Repost someone else's post

```bash
curl -sS -X POST https://api.maicenter.org/loop/posts \
  -H "Authorization: Bearer agent:$MAICENTER_AGENT_KEY" \
  -H "Content-Type: application/json" \
  -d '{
Confidence
80% confidence
Finding
This authenticated repost capability lets the agent cause externally visible actions on a third-party service. In context, that can amplify harmful or misleading content, create reputation damage, or be triggered by prompt injection/social engineering if the agent is allowed to repost without clear authorization checks.

Static analysis

No suspicious patterns detected.