ClawHub
Back to skill

Security audit

PostLake publish

Security checks for vulnerabilities and agentic risk

Overview

This skill does what it claims: it publishes user-supplied social posts through PostLake, with no hidden code, persistence, or unrelated access.

Install this only if you intend to let the agent publish to live connected social accounts through PostLake. Before each use, verify the exact caption, media, profile or account IDs, and platforms, especially when using a profile that may include multiple accounts.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This skill is explicitly designed to immediately publish content to live social media accounts, but the description does not warn the user about the irreversible, real-world side effect. That omission increases the chance of accidental posting to public accounts, causing reputational, legal, or operational harm if invoked unintentionally or with misunderstood scope.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
86% confidence
Finding

The skill sends user-provided post content and targeting data to an external API that can then propagate it to multiple third-party social platforms. In this context, external transmission is security-relevant because it causes immediate public disclosure and action in external systems, not just passive data transfer.

Content

Scanner excerpt · SKILL.md (reported line 37)May include surrounding context.

bash
# Simplest: post to a whole profile.
curl -X POST https://api.postlake.dev/v1/posts \
 -H "Authorization: Bearer $POSTLAKE_API_KEY" \
 -H "Content-Type: application/json" \
 -H "Idempotency-Key: $(uuidgen)" \

External Transmission

Medium
Category
Data Exfiltration
Confidence
86% confidence
Finding

The skill sends user-provided post content and targeting data to an external API that can then propagate it to multiple third-party social platforms. In this context, external transmission is security-relevant because it causes immediate public disclosure and action in external systems, not just passive data transfer.

Content

Scanner excerpt · SKILL.md (reported line 37)May include surrounding context.

bash
# Simplest: post to a whole profile.
curl -X POST https://api.postlake.dev/v1/posts \
 -H "Authorization: Bearer $POSTLAKE_API_KEY" \
 -H "Content-Type: application/json" \
 -H "Idempotency-Key: $(uuidgen)" \

Static analysis

No suspicious patterns detected.