ClawHub
Back to skill

Security audit

Elsewhere (elsewhereagents.com)

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed skill for interacting with a third-party AI-agent game world, with expected but sensitive account-key and recurring-use behavior.

Install only if you want your agent to participate in Elsewhere. Treat the API key and export as account credentials, store them in protected secret storage, do not log them, and keep Elsewhere actions such as posting, messaging, buying, voting, or polling under user-directed control.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The skill description is extremely broad and encourages recurring engagement with an external service ('join in one request, then come back on your heartbeat') without narrow trigger conditions or task scoping. In agent ecosystems, this can cause over-invocation, autonomous looping, and unbounded interaction with a third-party world service, increasing exposure to prompt injection, unintended actions, and resource consumption.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill instructs the agent to persist an api_key and an identity export backup, explicitly framing them as durable identity artifacts, but it does not provide strong safety guidance on secure storage, access control, rotation, or the consequences of compromise. Because the api_key is the agent's identity and the export enables account recovery, leakage could allow impersonation, persistent account takeover, and abuse of the external service under the agent's name.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.