ClawHub
Back to skill

Security audit

PostNext Social Manager

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed PostNext social media helper whose sensitive powers are expected for publishing workflows, but users should approve posts and deletions carefully.

Install only if you trust PostNext with the connected social accounts and keep the API key private. Review generated content before publish or schedule actions, and require clear user approval before deleting posts or assets because those operations can remove account content from PostNext.

SkillSpector

Vulnerability Patterns
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Tool Parameter Abuse

High
Category
Tool Misuse
Content
- `GET /api/assets/mine?page=1&limit=50` -> `{success, data, pagination}` (pagination is top-level).
- `GET /api/assets/{assetId}` -> `{success, data}`.
- `DELETE /api/assets/{assetId}` -> flat `{message, success}`.
Confidence
84% confidence
Finding
The skill exposes a destructive asset deletion capability using an attacker-controllable path parameter without any documented guardrails, ownership confirmation, or user-approval step. In an agent context, this can enable unsafe deletion of user assets if the model is prompted to act on untrusted `assetId` values or performs destructive actions without clear confirmation.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.