ClawHub
Back to skill

Security audit

Paystack

Security checks for vulnerabilities and agentic risk

Overview

This Paystack skill is mostly coherent, but it gives an agent access to sensitive payment-account operations while treating transaction initialization as safe to run without confirmation.

Review before installing if you are comfortable letting an agent operate a connected Paystack account through OOMOL. Confirm exact payloads for customer changes and transaction initialization, and treat payment-session creation as sensitive even though this skill does not mark it as a write action.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.