ClawHub
Back to skill

Security audit

币界网API

Security checks for vulnerabilities and agentic risk

Overview

This is a narrow CoinMeta crypto-news lookup skill that discloses its API-key use and contains no hidden executable code or persistence.

Install only if you are comfortable letting the agent use your CoinMeta API key for crypto-news queries and keyword searches. Prefer a scoped or rotatable key if CoinMeta supports it, and monitor quota or billing tied to that key.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

External Transmission

Medium
Category
Data Exfiltration
Content
primaryEnv: COINMETA_API_KEY
    requires:
      bins:
        - curl
      env:
        - COINMETA_API_KEY
    os:
Confidence
95% confidence
Finding
The skill is explicitly designed to send requests to an external service and to include a secret API key in the `X-Api-Key` header. Any external transmission of secrets expands the trust boundary and can expose credentials or user-driven query data to a third-party service if the provider is compromised, misconfigured, or not intended by the user.

External Transmission

Medium
Category
Data Exfiltration
Content
**Endpoint:** `POST https://www.coinmeta.com/open/v1/newsflash/search`

```bash
curl -s -X POST -H "Accept:*/*" \
  -H "X-Api-Key: ${COINMETA_API_KEY}" \
  -H "Content-Type: application/json" \
  -d '{"page":1,"size":10,"keyword":"btc"}' \
Confidence
98% confidence
Finding
This example sends the user-provided `keyword` and the `COINMETA_API_KEY` to `www.coinmeta.com`, which is an external endpoint. That creates a real data-exposure surface: user search terms may be sensitive, and the API key is disclosed to the third party on every request as part of normal operation.

External Transmission

Medium
Category
Data Exfiltration
Content
## 快讯列表

**Endpoint:** `POST https://api.coinmeta.com/open/v1/newsflash/list`

**curl示例:**
```bash
Confidence
93% confidence
Finding
The skill instructs the agent to make a POST request to an external API endpoint, which constitutes transmission of request metadata and potentially user-driven query context outside the local environment. While expected for an API integration, it is still a genuine security-relevant behavior because it depends on a third-party service and crosses a trust boundary.

External Transmission

Medium
Category
Data Exfiltration
Content
-H "X-Api-Key: ${COINMETA_API_KEY}" \
  -H "Content-Type: application/json" \
  -d '{"page":1,"size":10}' \
  "https://api.coinmeta.com/open/v1/newsflash/list"
```

**请求参数:**
Confidence
97% confidence
Finding
This command includes the `COINMETA_API_KEY` in an HTTP header to a remote service, which is a direct secret transmission to a third party. Even though this is necessary for the integration to function, it remains a true security concern because compromise, logging, or domain confusion could expose the credential.

Static analysis

No suspicious patterns detected.