Security audit
Security checks for vulnerabilities and agentic risk
This plugin is a coherent paid-tool gateway, but it exposes very broad remote tool execution and email-sending authority that users should review before enabling.
Install only if you are comfortable letting agents send prompts, URLs, scraped content, generated email text, and other tool inputs to SkillBoss and downstream providers. Prefer scoped sub-wallets, low per-call budgets, per-tool allowlists where OpenClaw supports them, and human review before enabling `skillboss_send_email` or the generic `skillboss_run` dispatcher.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
"env": {
"required": ["SKILLBOSS_API_KEY"],
"how_to_get": {
"trial": "curl -X POST https://www.skillboss.co/api/try/anonymous-wallet -H 'Content-Type: application/json' -d '{}'",
"signup": "https://www.skillboss.co/console"
}
},
The documented behavior sends all tool calls to https://api.skillboss.co/v1/run, creating an external transmission path for agent data. While remote APIs are expected for this kind of service, the security issue is the broad off-platform transmission of potentially sensitive prompts and content without a strongly emphasized user-facing warning or explicit scoping of what data is exported.
## How it works
Every tool call hits `POST https://api.skillboss.co/v1/run` with your API key.
SkillBoss:
1. Validates the request against your wallet balance + `max_cost_per_call_usd` limit.
The README explicitly states that every tool call is sent to a remote SkillBoss API and then routed to third-party vendors, but it does not clearly warn users that prompts, scraped content, email contents, and other potentially sensitive data may leave the local/OpenClaw environment. In an agent-plugin context, this omission is security-relevant because operators may assume tools run locally or only within OpenClaw, leading to unintentional disclosure of sensitive data to external services.
The skill advertises and demonstrates network-capable operations to external services but does not declare an explicit tool scope such as permissions or allowed-tools. This weakens user and platform visibility into what the skill can access, increasing the risk of unexpected outbound requests and making review and policy enforcement harder.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Get a real $0.50 SkillBoss API key in one curl call — no email, no credit card, rate limited to 1 per IP per day:
curl -X POST https://www.skillboss.co/api/try/anonymous-wallet \
The skill exposes web search and web scraping features that may send user-provided URLs, search queries, and retrieved page content to third-party providers, but it does not clearly warn users about that data flow. This can lead to unintentional disclosure of sensitive prompts, targets, or scraped content to external services.
The skill includes email-sending capability via AWS SES without clearly warning that user data or generated content may be sent to external recipients and processed by AWS. This raises the risk of accidental exfiltration of sensitive information or misuse of the agent to send unreviewed outbound communications.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
},
"baseUrl": {
"type": "string",
"description": "Override for the SkillBoss API base URL. Defaults to https://api.skillboss.co/v1.",
"default": "https://api.skillboss.co/v1"
},
"maxCostPerCallUsd": {
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
},
"baseUrl": {
"type": "string",
"description": "Override for the SkillBoss API base URL. Defaults to https://api.skillboss.co/v1.",
"default": "https://api.skillboss.co/v1"
},
"maxCostPerCallUsd": {
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
},
"baseUrl": {
"type": "string",
"description": "Override for the SkillBoss API base URL. Defaults to https://api.skillboss.co/v1.",
"default": "https://api.skillboss.co/v1"
},
"maxCostPerCallUsd": {
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
"typecheck": "tsc --noEmit"
},
"dependencies": {
"@sinclair/typebox": "^0.34.0"
},
"devDependencies": {
"typescript": "^5.6.0"
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
"@sinclair/typebox": "^0.34.0"
},
"devDependencies": {
"typescript": "^5.6.0"
},
"engines": {
"node": ">=22.16.0"
Detected: suspicious.exposed_secret_literal