ClawHub
Back to skill

Security audit

Peekmd

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward markdown-to-web-page sharing helper, but users should avoid sending private or sensitive content to it.

Install only if you are comfortable sending selected markdown to peekmd.dev and receiving a shareable URL. Do not upload secrets, credentials, personal data, internal reports, regulated content, or private logs unless you have reviewed and redacted them first; use short TTLs and the burn endpoint for temporary shares.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The skill encourages users and agents to upload arbitrary markdown to a public, shareable URL and emphasizes convenience and sharing, but it does not warn that uploaded content may contain sensitive data and will be externally transmitted and exposed via a retrievable link. In an agent context, this creates a meaningful risk of unintended data disclosure because agents may forward reports, logs, or other private content to a third-party service without user awareness.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
93% confidence
Finding

The example explicitly posts user-provided markdown to an external domain, which is a real external transmission path. While this is the core function of the tool rather than overtly malicious behavior, it is still security-relevant because an agent could exfiltrate sensitive prompts, reports, logs, or embedded secrets to a third-party web service and generate a shareable public link.

Content

Scanner excerpt · SKILL.md (reported line 12)May include surrounding context.

Quick Start (Free Tier)

bash
curl -X POST https://peekmd.dev/api/create \
  -H "Content-Type: application/json" \
  -d '{"markdown": "# Hello World\n\nThis is a **peekmd** page."}'

Static analysis

No suspicious patterns detected.