ClawHub
Back to skill

Security audit

JSONBin.io

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward JSONBin.io connector skill with disclosed read, create, update, and delete capabilities.

Install this only if you want the agent to operate your JSONBin.io account through OOMOL. Review the exact payload before approving create, update, or delete actions, because those can change or remove remote data.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The skill’s trigger guidance says to use it for ANY JSONBin.io request, which creates a very broad delegation boundary around a tool that supports both read and state-changing operations. In practice, this can cause an agent to route unrelated or insufficiently scoped JSONBin tasks through the skill and increase the chance of unintended writes, deletes, or handling of sensitive data without narrower task qualification.

Static analysis

No suspicious patterns detected.