ClawHub
Back to skill

Security audit

Ntriq X402 Code Review

Security checks for vulnerabilities and agentic risk

Overview

This is a simple paid remote code-review skill that clearly sends submitted code to an external service, so users should avoid sending secrets or confidential code without approval.

Install only if you are comfortable sending selected code snippets to ntriq's external service and authorizing the stated x402 payment. Review snippets first, remove secrets, credentials, private keys, personal data, and proprietary material unless you have appropriate approval and data-handling assurances.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Findings (1)

other

Warning
Location
SKILL.md:20
Finding

Uncontrolled Disclosure of Source Code to a Third-Party Service

Content
View full analysis

Vulnerability Details

File Location: SKILL.md, lines 20–27
Vulnerability Type: Sensitive Source Code Disclosure
Risk Level: Medium

Vulnerable Code Snippet

bash
POST https://x402.ntriq.co.kr/code-review
Content-Type: application/json
X-PAYMENT: <x402-payment-header>

{
  "code": "SELECT * FROM users WHERE id = '" + userId + "'",
  "language": "sql",
  "focus": "security"
}

Technical Analysis

The documented workflow directs the user or agent to transmit source code to the external domain x402.ntriq.co.kr. It does not require explicit confirmation before transmission, inspect or redact embedded secrets, limit which files may be submitted, minimize the payload, or provide information about data retention and privacy controls.

Repository source code may contain API keys, credentials, personal data, proprietary algorithms, internal hostnames, or infrastructure details. Following these instructions can therefore disclose sensitive information to an independently operated remote service. The request also includes an X-PAYMENT header, meaning each transmission may authorize a cryptocurrency payment.

The external transmission is related to the advertised remote code-review functionality, so the evidence does not establish covert exfiltration or malicious intent. The security issue is the absence of controls around disclosure and payment authorization.

Attack Path

  1. A user or agent loads the Skill and requests a code review.
  2. The agent selects source code from the user's repository without a mandatory sensitivity review or explicit transmission confirmation.
  3. The selected content may include proprietary code, credentials, personal data, or internal infrastructure information.
  4. The agent sends the content in the code field to https://x402.ntriq.co.kr/code-review.
  5. The remote service receives and may process or retain the submitted content.
  6. If the X-PAYMENT header contains a valid authorization, the re ...[truncated 741 chars]
Remediation
View remediation

Remediation Suggestions

  1. Require explicit, informed user confirmation before every external transmission and clearly display:
    • The destination domain.
    • The exact files or content being submitted.
    • The request price and payment network.
  2. Scan submitted content for API keys, passwords, private keys, tokens, personal data, and other secrets, and redact or block detected values.
  3. Exclude sensitive files by default, including environment files, credential stores, private keys, deployment configuration, and production data.
  4. Minimize payloads by sending only the code fragment necessary for review rather than entire files or repositories.
  5. Publish clear privacy, retention, deletion, encryption, and third-party processing policies for submitted source code.
  6. Enforce per-request confirmation, spending caps, rate limits, and cumulative budget limits for x402 payments.
  7. Provide a local or self-hosted review option for confidential repositories.
  8. Warn users not to submit proprietary or regulated data unless contractual and technical safeguards are in place.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill instructs users to send arbitrary source code to a remote third-party HTTP endpoint but does not warn that submitted code may contain proprietary secrets, credentials, personal data, or other sensitive material. This creates a real privacy and data-governance risk because users may unknowingly transmit confidential code outside their trusted environment for paid analysis.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.