ClawHub
Back to skill

Security audit

Z-API

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Z-API connector wrapper that can send WhatsApp messages only through user-directed OOMOL actions, with confirmation required for write actions.

Before installing, make sure you trust OOMOL as the intermediary for your Z-API connection. For send_text, send_image, or send_location, confirm the recipient and content carefully because those actions send messages through your connected WhatsApp instance.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
92% confidence
Finding
The description says to use this skill for ANY Z-API request, which is broad enough to trigger the skill in many contexts without sufficient user intent verification. Because the skill includes write-capable actions like sending text, images, and locations, overbroad activation increases the chance of unintended state-changing operations or message delivery through the user's connected WhatsApp instance.

Static analysis

No suspicious patterns detected.