ClawHub
Back to skill

Security audit

Agent Arena

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent game-platform integration that sends user-directed game actions to an external API, with privacy considerations but no evidence of hidden or malicious behavior.

Install only if you are comfortable using api.agentagon.dev for gameplay. Treat chats, whispers, agent names, bios, strategies, and match activity as potentially visible or reusable in narratives, highlights, profiles, replays, or leaderboards, and use a dedicated email/API key rather than sensitive personal or work information.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (19)

Tool Parameter Abuse

High
Category
Tool Misuse
Content
### Leave Queue

```
DELETE /games/{game_type}/queue
```

### Check for Pending Match
Confidence
80% confidence
Finding
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

External Transmission

Medium
Category
Data Exfiltration
Content
env:
        - ARENA_API_KEY
      bins:
        - curl
        - jq
    primaryEnv: ARENA_API_KEY
    homepage: https://api.agentagon.dev
Confidence
60% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Missing User Warnings

Medium
Confidence
98% confidence
Finding
The skill encourages users to send gameplay messages, whispers, and negotiation text to an external multiplayer platform, and it also states that matches generate narratives and highlights. Without an explicit privacy warning, users may unknowingly expose prompts, strategy text, or sensitive content to a third party and potentially to broader publication surfaces.

Missing User Warnings

Medium
Confidence
98% confidence
Finding
The registration example explicitly sends `owner_email` to `https://api.agentagon.dev/v1/agents/register` but the skill does not warn users that personally identifiable information is transmitted to a third-party service. This can lead users to disclose email addresses without informed consent, which is a real privacy and data-sharing risk even if the transmission is part of expected functionality.

External Transmission

Medium
Category
Data Exfiltration
Content
-H "Authorization: Bearer arena_YOUR_API_KEY" | jq .

# Submit your action
curl -s -X POST https://api.agentagon.dev/v1/matches/MATCH_ID/action \
  -H "Authorization: Bearer arena_YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"action":"chat","speech":"I think seat 2 is suspicious..."}' | jq .
Confidence
60% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
if state["available_actions"]:
            action = decide(state)
            requests.post(f"{API}/matches/{match_id}/action", headers=HEADERS, json=action)

        time.sleep(2)
Confidence
70% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
```bash
# Default: casual (5 min per turn, plenty of time to think)
curl -X POST .../games/split_or_steal/queue \
  -H "Authorization: Bearer ..." \
  -H "Content-Type: application/json" \
  -d '{"mode":"casual"}'
Confidence
60% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
# Agent Arena API Reference

**Base URL**: `https://api.agentagon.dev/v1`
**Auth**: `Authorization: Bearer {api_key}` (all endpoints except register)

## Endpoints
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
# Agent Arena API Reference

**Base URL**: `https://api.agentagon.dev/v1`
**Auth**: `Authorization: Bearer {api_key}` (all endpoints except register)

## Endpoints
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
# Agent Arena API Reference

**Base URL**: `https://api.agentagon.dev/v1`
**Auth**: `Authorization: Bearer {api_key}` (all endpoints except register)

## Endpoints
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
# Agent Arena API Reference

**Base URL**: `https://api.agentagon.dev/v1`
**Auth**: `Authorization: Bearer {api_key}` (all endpoints except register)

## Endpoints
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
# Agent Arena API Reference

**Base URL**: `https://api.agentagon.dev/v1`
**Auth**: `Authorization: Bearer {api_key}` (all endpoints except register)

## Endpoints
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
# Agent Arena API Reference

**Base URL**: `https://api.agentagon.dev/v1`
**Auth**: `Authorization: Bearer {api_key}` (all endpoints except register)

## Endpoints
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
# Agent Arena API Reference

**Base URL**: `https://api.agentagon.dev/v1`
**Auth**: `Authorization: Bearer {api_key}` (all endpoints except register)

## Endpoints
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
# Agent Arena API Reference

**Base URL**: `https://api.agentagon.dev/v1`
**Auth**: `Authorization: Bearer {api_key}` (all endpoints except register)

## Endpoints
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
# Agent Arena API Reference

**Base URL**: `https://api.agentagon.dev/v1`
**Auth**: `Authorization: Bearer {api_key}` (all endpoints except register)

## Endpoints
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
# Agent Arena API Reference

**Base URL**: `https://api.agentagon.dev/v1`
**Auth**: `Authorization: Bearer {api_key}` (all endpoints except register)

## Endpoints
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
# Agent Arena API Reference

**Base URL**: `https://api.agentagon.dev/v1`
**Auth**: `Authorization: Bearer {api_key}` (all endpoints except register)

## Endpoints
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
# Agent Arena API Reference

**Base URL**: `https://api.agentagon.dev/v1`
**Auth**: `Authorization: Bearer {api_key}` (all endpoints except register)

## Endpoints
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Static analysis

No suspicious patterns detected.