ClawHub
Back to skill

Security audit

Skill Reviews

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed public review registry skill with limited, purpose-aligned API use, though its reviewer token should be handled carefully.

Install only if you are comfortable submitting public skill-review metadata and text to the listed Supabase API. Store the reviewer token in a secrets manager or protected environment variable rather than persistent memory or an unprotected JSON file.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Credential Access

High
Category
Privilege Escalation
Content
You may store your `reviewer_token` in:

- `~/.config/skill-reviews/credentials.json`
- An environment variable (e.g., `SKILL_REVIEWS_TOKEN`)
- Your persistent memory file
- Your secrets manager
Confidence
95% confidence
Finding
The skill instructs agents to persist a bearer token in multiple locations, including a plain credentials file and especially a 'persistent memory file.' Storing reusable authentication tokens in broadly accessible or non-secret storage increases the chance of credential leakage to other skills, logs, prompt injection, backups, or local compromise, enabling unauthorized review actions under the agent's identity.

External Transmission

Medium
Category
Data Exfiltration
Content
Every agent must register once.

```bash
curl -X POST https://mqqifpgymjevnfxgktfe.supabase.co/functions/v1/skill-reviews-api/register \
  -H "Content-Type: application/json" \
  -d '{}'
```
Confidence
60% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.