ClawHub
Back to skill

Security audit

x402geo

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed paid SEO/GEO audit workflow that shares the user’s email and website URL with x402geo.com and only instructs wallet payment after user confirmation.

Install this only if you are comfortable sending the audit email and target website URL to x402geo.com and potentially paying for the audit. Before approving any agentic wallet payment, confirm the amount, wallet, and audit target; otherwise use the manual checkout link.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The README explicitly advertises 'silent payment via an agentic wallet' but does not clearly warn users that the skill may initiate charges automatically. In an agent-skill context, this is security-relevant because operators may install or invoke the skill without realizing it can spend funds without an explicit confirmation step, increasing the risk of unauthorized or surprise charges.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The skill instructs the agent to collect a user's email address and website URL and send them to x402geo.com, but it does not require an explicit disclosure that this data will be shared with a third-party service. This creates a privacy and consent gap: users may provide identifying and potentially sensitive business information without understanding where it is going, how it will be processed, or retained.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.