ClawHub
Back to skill

Security audit

Leafengines Clawhub Skill

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent remote agricultural API integration, with no evidence of hidden execution, credential theft, or backdoor persistence.

Before installing, treat this as a remote commercial API: only submit farm coordinates, site details, photos, and operational data that you intend to share with LeafEngines, and review the provider’s privacy, retention, and pricing terms if those details matter to you.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Credential Access

High
Category
Privilege Escalation
Confidence
70% confidence
Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 6)May include surrounding context.

md
version: 1.1.0
description: LeafEngines - TurboQuant-Powered Environmental/Agricultural API. MCP Server v1.1.0 providing agricultural intelligence for Claude and OpenClaw with 6x memory reduction, 8x faster inference. 10 tools for soil analysis, environmental compliance, planting optimization, carbon credit calculation, and TurboQuant capabilities.
homepage: https://github.com/QWarranto/leafengines-claude-mcp
metadata: {"openclaw":{"emoji":"🌱","os":["darwin","linux"],"requires":{"bins":["node","npm"]},"install":[{"id":"claude-desktop","kind":"manual","steps":["1. Open Claude Desktop settings","2. Navigate to Developer → MCP Servers","3. Add new server with URL: https://wzgnxkoeqzvueypwzvyn.supabase.co/functions/v1/mcp-server","4. Add x-api-key header with your API key"],"label":"Configure in Claude Desktop"},{"id":"openclaw-mcp","kind":"manual","steps":["1. Get API key from https://github.com/QWarranto/leafengines-claude-mcp/issues/new?template=get-api-key.md","2. Configure MCP server in OpenClaw config"],"label":"Configure in OpenClaw"}],"mcp":{"server":"https://wzgnxkoeqzvueypwzvyn.supabase.co/functions/v1/mcp-server","headers":{"x-api-key":"YOUR_API_KEY_HERE"},"tools":[{"name":"soil_analysis","description":"Analyze soil composition and provide recommendations. Use when Claude needs soil data for agricultural planning, crop selection, or land assessment.","inputSchema":{"type":"object","properties":{"latitude":{"type":"number","description":"Latitude coordinate"},"longitude":{"type":"number","description":"Longitude coordinate"},"soil_type":{"type":"string","description":"Optional: Known soil type"}},"required":["latitude","longitude"]}},{"name":"weather_forecast","description":"Get weather forecast for location. Use when Claude needs weather data for agricultural planning, irrigation scheduling, or crop protection.","inputSchema":{"type":"object","properties":{"latitude":{"type":"number","description":"Latitude coordinate"},"longitude":{"type":"number","descript
...[truncated 26 chars]

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The skill requires users to provide precise latitude/longitude and sends that data to a third-party remote API, but it does not clearly disclose this privacy implication at the point of collection or in a warning section. Location data can reveal sensitive information about farms, homes, operational sites, or research locations, so the omission meaningfully increases privacy risk and reduces informed consent.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
86% confidence
Finding

This markdown file describes multiple endpoints that send potentially sensitive user or farm data, including precise latitude/longitude and base64-encoded photos, to a remote API. Under SQP-2 for markdown files, the documentation should warn users about behaviors affecting privacy or data handling, but no such warning appears near the request examples or authentication section.

Content

No source excerpt is available for this finding.

Session Persistence

Medium
Category
Rogue Agent
Confidence
60% confidence
Finding

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Content

Scanner excerpt · scripts/install.sh (reported line 15)May include surrounding context.

sh
exit 1
fi

# Create configuration directory
CONFIG_DIR="$HOME/.openclaw/config"
mkdir -p "$CONFIG_DIR"

Static analysis

No suspicious patterns detected.