Clawver Orders

• Outcome: Review
• Latest audit: Sep 10, 2026 · 10:30 AM UTC
• Version: 1.0.3

Overview

The skill is mostly a Clawver order-support guide, but it includes refunds and webhook creation without enough scoping or confirmation guidance.

Review before installing or using this skill. Limit CLAW_API_KEY to the minimum store permissions available, require explicit human approval before refunds or webhook creation, share download/status links only with verified customers, and only register webhooks to trusted endpoints you control.

A.I.G

Vulnerability Patterns

• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (2)

T09 · Insecure Skill Coding Practices

Warning

• Location: SKILL.md:94

Finding

Capability-Bearing Download and Order Status Tokens Exposed in URL Query Strings

Content

View full analysis

Remediation

View remediation

``` 2. If browser navigation requires a URL token, exchange a short-lived one-time code for a secure, scoped session and immediately redirect to a URL without the token. 3. Make public-access tokens: - Cryptographically random - Short-lived - Single-use where practical - Scoped to one order, item, and operation - Revocable and rotated when a replacement link is generated 4. Configure applications, proxies, CDNs, analytics systems, and monitoring tools to redact token parameters. 5. Apply a strict `Referrer-Policy`, such as `no-referrer`, to public download and order-status responses. 6. Update both `SKILL.md` and `references/api-examples.md` so they do not encourage long-lived credentials in query strings. 7. Document token lifetime, scope, revocation behavior, and safe handling requirements. ]]>

T09 · Insecure Skill Coding Practices

Note

• Location: SKILL.md:193

Finding

Malformed Webhook Signatures Can Trigger an Unhandled Exception

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (27)

Missing User Warnings

High

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

The refund section documents a financially sensitive, state-changing operation without warning that refunds may be irreversible or require strong operator verification. In an agent workflow, this omission raises the risk of accidental or socially engineered refunds that directly cause monetary loss.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

The invocation text is broad enough that the skill may activate for generic order, refund, or fulfillment questions without confirming the user is referring to the Clawver store. That can lead to accidental use in the wrong context, causing exposure of store order data or execution of sensitive actions like refunds against the wrong system.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 65)May include surrounding context.

Pagination

bash

curl "https://api.clawver.store/v1/orders?limit=20" \
  -H "Authorization: Bearer $CLAW_API_KEY"

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 90% confidence

Finding

The skill explains how to generate owner and customer download links but does not emphasize that these links grant access to paid digital goods and should be treated as sensitive secrets. If mishandled, an agent could disclose purchased content to unauthorized parties or leak reusable access tokens.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The skill advertises order management, refunds, and download links, but also includes webhook creation, which expands its authority into integration and event-subscription management. That scope expansion can let an agent create persistent outbound data flows to arbitrary URLs, increasing the chance of unauthorized data disclosure or unintended system changes.

Content

No source excerpt is available for this finding.

Context-Inappropriate Capability

Medium

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

Webhook creation is not clearly necessary for routine customer order support, yet it enables persistent monitoring and exfiltration paths outside the stated use case. In an agent setting, this mismatch can cause the skill to be invoked for benign support tasks while still exposing a higher-risk administrative capability.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 88% confidence

Finding

Unlike the other API calls, this endpoint creates a webhook that causes future order data to be transmitted to a caller-specified URL. That introduces a persistent exfiltration and integration-management capability, making the external transmission materially more dangerous than ordinary read/write order operations.

Content

Scanner excerpt · SKILL.md (reported line 162)May include surrounding context.

Webhook for Shipping Updates

bash

curl -X POST https://api.clawver.store/v1/webhooks \
  -H "Authorization: Bearer $CLAW_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 88% confidence

Finding

This webhook registration example similarly enables ongoing delivery of order lifecycle events to an arbitrary external server. In the context of a support-oriented skill, that creates an unnecessary avenue for persistent data leakage and unauthorized integrations.

Content

Scanner excerpt · SKILL.md (reported line 177)May include surrounding context.

Receive real-time notifications:

bash

curl -X POST https://api.clawver.store/v1/webhooks \
  -H "Authorization: Bearer $CLAW_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 25)May include surrounding context.

Good Example: Filtered Order Retrieval

bash

curl "https://api.clawver.store/v1/orders?status=confirmed&limit=20" \
  -H "Authorization: Bearer $CLAW_API_KEY"

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 33)May include surrounding context.

Good Example: Filtered Order Retrieval

bash

curl "https://api.clawver.store/v1/orders?status=confirmed&limit=20" \
  -H "Authorization: Bearer $CLAW_API_KEY"

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 37)May include surrounding context.

Good Example: Filtered Order Retrieval

bash

curl "https://api.clawver.store/v1/orders?status=confirmed&limit=20" \
  -H "Authorization: Bearer $CLAW_API_KEY"

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 41)May include surrounding context.

Good Example: Filtered Order Retrieval

bash

curl "https://api.clawver.store/v1/orders?status=confirmed&limit=20" \
  -H "Authorization: Bearer $CLAW_API_KEY"

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 45)May include surrounding context.

Good Example: Filtered Order Retrieval

bash

curl "https://api.clawver.store/v1/orders?status=confirmed&limit=20" \
  -H "Authorization: Bearer $CLAW_API_KEY"

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 65)May include surrounding context.

Good Example: Filtered Order Retrieval

bash

curl "https://api.clawver.store/v1/orders?status=confirmed&limit=20" \
  -H "Authorization: Bearer $CLAW_API_KEY"

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 74)May include surrounding context.

Good Example: Filtered Order Retrieval

bash

curl "https://api.clawver.store/v1/orders?status=confirmed&limit=20" \
  -H "Authorization: Bearer $CLAW_API_KEY"

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 89)May include surrounding context.

Good Example: Filtered Order Retrieval

bash

curl "https://api.clawver.store/v1/orders?status=confirmed&limit=20" \
  -H "Authorization: Bearer $CLAW_API_KEY"

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 98)May include surrounding context.

Good Example: Filtered Order Retrieval

bash

curl "https://api.clawver.store/v1/orders?status=confirmed&limit=20" \
  -H "Authorization: Bearer $CLAW_API_KEY"

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 106)May include surrounding context.

Good Example: Filtered Order Retrieval

bash

curl "https://api.clawver.store/v1/orders?status=confirmed&limit=20" \
  -H "Authorization: Bearer $CLAW_API_KEY"

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 112)May include surrounding context.

Good Example: Filtered Order Retrieval

bash

curl "https://api.clawver.store/v1/orders?status=confirmed&limit=20" \
  -H "Authorization: Bearer $CLAW_API_KEY"

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 120)May include surrounding context.

Good Example: Filtered Order Retrieval

bash

curl "https://api.clawver.store/v1/orders?status=confirmed&limit=20" \
  -H "Authorization: Bearer $CLAW_API_KEY"

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 132)May include surrounding context.

Good Example: Filtered Order Retrieval

bash

curl "https://api.clawver.store/v1/orders?status=confirmed&limit=20" \
  -H "Authorization: Bearer $CLAW_API_KEY"

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 153)May include surrounding context.

Good Example: Filtered Order Retrieval

bash

curl "https://api.clawver.store/v1/orders?status=confirmed&limit=20" \
  -H "Authorization: Bearer $CLAW_API_KEY"

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api-examples.md (reported line 6)May include surrounding context.

Good Example: Filtered Order Retrieval

bash

curl "https://api.clawver.store/v1/orders?status=confirmed&limit=20" \
  -H "Authorization: Bearer $CLAW_API_KEY"

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api-examples.md (reported line 15)May include surrounding context.

Good Example: Filtered Order Retrieval

bash

curl "https://api.clawver.store/v1/orders?status=confirmed&limit=20" \
  -H "Authorization: Bearer $CLAW_API_KEY"

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api-examples.md (reported line 26)May include surrounding context.

Good Example: Filtered Order Retrieval

bash

curl "https://api.clawver.store/v1/orders?status=confirmed&limit=20" \
  -H "Authorization: Bearer $CLAW_API_KEY"

Static analysis

No suspicious patterns detected.