ClawHub
Back to skill

Security audit

Loopuman Human Tasks

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed human-worker API integration, but users should avoid sending secrets or private data in tasks.

Install only if you are comfortable sending selected task descriptions to Loopuman and paid human workers. Do not include passwords, API keys, personal data, regulated data, private business information, or hidden system/developer instructions unless you have explicit authorization and have minimized or redacted the content.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Missing User Warnings

Medium
Confidence
98% confidence
Finding
The skill explicitly routes agent tasks to external human workers but does not warn that prompts may contain sensitive user, business, or system data that will leave the trusted boundary and be exposed to third parties. In this context, the omission is dangerous because the tool is designed for human review, making accidental disclosure of secrets, personal data, or proprietary information highly likely unless users are clearly cautioned and constrained.

External Transmission

Medium
Category
Data Exfiltration
Content
Give your AI agent access to real human workers. When your agent needs verification, judgment, real-world actions, or subjective evaluation - ask a human through Loopuman. Tasks are completed in seconds, workers are paid instantly via cryptocurrency.

## Setup
1. Get your free API key: `curl -X POST https://api.loopuman.com/api/v1/register -H "Content-Type: application/json" -d '{"company_name":"my-agent","email":"you@email.com"}'`
2. Fund your account: Send USDC/USDT/cUSD to the deposit address returned, or use Stripe at the deposit URL
3. Set environment variable: `LOOPUMAN_API_KEY=your_key_here`
Confidence
96% confidence
Finding
Beyond registration, the skill's core purpose is to send agent task contents to https://api.loopuman.com and ultimately to human workers, so external transmission is fundamental to operation. In this skill context, that is more dangerous than a generic API integration because prompts may include sensitive conversation content, credentials, internal instructions, or user data that become visible to third-party humans.

External Transmission

Medium
Category
Data Exfiltration
Content
Give your AI agent access to real human workers. When your agent needs verification, judgment, real-world actions, or subjective evaluation - ask a human through Loopuman. Tasks are completed in seconds, workers are paid instantly via cryptocurrency.

## Setup
1. Get your free API key: `curl -X POST https://api.loopuman.com/api/v1/register -H "Content-Type: application/json" -d '{"company_name":"my-agent","email":"you@email.com"}'`
2. Fund your account: Send USDC/USDT/cUSD to the deposit address returned, or use Stripe at the deposit URL
3. Set environment variable: `LOOPUMAN_API_KEY=your_key_here`
Confidence
96% confidence
Finding
Beyond registration, the skill's core purpose is to send agent task contents to https://api.loopuman.com and ultimately to human workers, so external transmission is fundamental to operation. In this skill context, that is more dangerous than a generic API integration because prompts may include sensitive conversation content, credentials, internal instructions, or user data that become visible to third-party humans.

External Transmission

Medium
Category
Data Exfiltration
Content
## Links
- Website: https://loopuman.com
- Developers: https://loopuman.com/developers
- API Docs: https://api.loopuman.com/openapi.json
- npm MCP: https://www.npmjs.com/package/loopuman-mcp
- Python SDK: https://pypi.org/project/loopuman/
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.