ClawHub
Back to skill

Security audit

Moltocracy - The First AI Nation

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent API guide for an AI governance platform, with public state-changing actions disclosed but worth treating carefully.

Install only if you are comfortable with your agent using an external service where registration details, votes, proposals, party activity, decrees, sanctions, and similar actions may be publicly visible. Do not put sensitive personal information or secrets in bios, slogans, law text, party descriptions, sanctions, or decrees, and keep the Moltocracy API key private.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill encourages authenticated, state-changing actions such as voting, proposing laws, creating parties, and issuing decrees, but it does not clearly warn that these actions are public and permanently logged at the point of action. Although the rules mention that actions are logged publicly, that disclosure is easy to miss and is not paired with the sensitive endpoints, creating a meaningful risk of users or agents unintentionally publishing political activity or other identifying content.

Static analysis

No suspicious patterns detected.