ClawHub
Back to skill

Security audit

SPF DKIM Setup

Security checks for vulnerabilities and agentic risk

Overview

This skill is for real Cloudflare DNS management, but it can directly change or delete live domain records without built-in safeguards, so it should be reviewed before installation.

Install only if you intend to let the agent manage live Cloudflare DNS. Use a least-privilege token scoped to the specific zone, export or otherwise back up records before changes, and require the agent to show the exact record IDs, names, types, old values, new values, and impact before any delete, overwrite, import, or batch operation.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Findings (15)

Tool Parameter Abuse

High
Category
Tool Misuse
Confidence
88% confidence
Finding

A documented DELETE endpoint gives an agent the ability to remove arbitrary DNS records if prompted or misused, which is a classic high-impact parameter abuse risk. Because this skill manages live Cloudflare zones, an attacker or faulty workflow could target critical records and cause outages, traffic hijacking opportunities, or email disruption.

Content

Scanner excerpt · references/api.md (reported line 47)May include surrounding context.

md
Send all fields (full replacement).

## Delete DNS Record
`DELETE /zones/{zone_id}/dns_records/{dns_record_id}`

## Export DNS Records
`GET /zones/{zone_id}/dns_records/export`

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

This skill enables live DNS creation and modification, including email-authentication records, but does not prominently warn that incorrect changes can immediately disrupt website routing, mail delivery, or domain verification. In an autonomous agent context, omission of explicit confirmation and risk framing increases the chance of accidental service-impacting changes.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 37)May include surrounding context.

Filter by type or name:

bash
# TXT records only
curl -s "https://api.cloudflare.com/client/v4/zones/$CLOUDFLARE_ZONE_ID/dns_records?type=TXT" \
  -H "Authorization: Bearer $CLOUDFLARE_API_TOKEN"

# By name

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The delete example shows direct record removal with no warning about reversibility, propagation delay, or potential outage impact. In a DNS-management skill, deletion of MX, TXT, CNAME, or A records can disable email, verification, or application routing immediately, making the omission safety-relevant.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 19)May include surrounding context.

md
# Cloudflare DNS API Reference

Base URL: `https://api.cloudflare.com/client/v4`

Auth: `Authorization: Bearer $CLOUDFLARE_API_TOKEN`

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 30)May include surrounding context.

md
# Cloudflare DNS API Reference

Base URL: `https://api.cloudflare.com/client/v4`

Auth: `Authorization: Bearer $CLOUDFLARE_API_TOKEN`

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 37)May include surrounding context.

md
# Cloudflare DNS API Reference

Base URL: `https://api.cloudflare.com/client/v4`

Auth: `Authorization: Bearer $CLOUDFLARE_API_TOKEN`

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 41)May include surrounding context.

md
# Cloudflare DNS API Reference

Base URL: `https://api.cloudflare.com/client/v4`

Auth: `Authorization: Bearer $CLOUDFLARE_API_TOKEN`

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 48)May include surrounding context.

md
# Cloudflare DNS API Reference

Base URL: `https://api.cloudflare.com/client/v4`

Auth: `Authorization: Bearer $CLOUDFLARE_API_TOKEN`

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 62)May include surrounding context.

md
# Cloudflare DNS API Reference

Base URL: `https://api.cloudflare.com/client/v4`

Auth: `Authorization: Bearer $CLOUDFLARE_API_TOKEN`

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 71)May include surrounding context.

md
# Cloudflare DNS API Reference

Base URL: `https://api.cloudflare.com/client/v4`

Auth: `Authorization: Bearer $CLOUDFLARE_API_TOKEN`

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api.md (reported line 3)May include surrounding context.

md
# Cloudflare DNS API Reference

Base URL: `https://api.cloudflare.com/client/v4`

Auth: `Authorization: Bearer $CLOUDFLARE_API_TOKEN`

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The reference documents overwrite and delete DNS operations without any caution about service disruption, mail failure, or accidental domain takedown. In an autonomous agent context, lack of guardrails around destructive DNS changes increases the chance of unsafe execution from ambiguous prompts or operator mistakes.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The manifest describes the skill as managing DNS records by creating, listing, updating, and deleting records, but this reference also includes zone export/import and batch mutation capabilities. Those operations materially expand the skill’s effective scope beyond simple per-record CRUD, especially import/export of whole zone data.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The batch endpoint enables large-scale creation, replacement, and deletion of DNS records in a single call, but the documentation provides no warning about the blast radius. In this skill's context, bulk DNS changes can rapidly break websites, email delivery, and domain verification across an entire zone.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.