ClawHub
Back to skill

Security audit

openclaw-skill-shorturl

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward URL-shortening skill that uses a disclosed external API, but users should avoid submitting sensitive or private URLs.

Install only if you are comfortable sending URLs to shorturl.bot. Do not shorten URLs containing tokens, passwords, private internal paths, personal data, or sensitive query parameters.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The skill instructs users to submit full URLs to a third-party shortening API but does not warn that those URLs and related metadata may be transmitted, logged, and exposed outside the local environment. This is risky because URLs often contain sensitive query parameters, internal paths, or identifiers, and the example response explicitly includes metadata such as ownerId and submitterIp, reinforcing the privacy exposure.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The script transmits the user-supplied long URL to a third-party service at shorturl.bot, which can expose sensitive URLs, query parameters, tokens, or internal resource locations to an external operator without any explicit warning or consent flow. In a skill context, this is more dangerous because users may treat local utility scripts as harmless and not realize their data is being sent off-platform.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
95% confidence
Finding

Natural-language content in the skill forces a specific language for all instructions and examples. There is no indication that the skill is region-specific or that users may opt into Chinese, which can violate language or locale policy requirements.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
89% confidence
Finding

The file's descriptive text and user-facing messages are written only in Chinese, which imposes a specific language on users without opt-in. Under the policy, locale or language constraints should either be optional or clearly justified as region-specific.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.