T05 · Unauthorized Access and Privilege Escalation
Error
- Location
SKILL.md:119- Finding
Excessive Collection and External Transmission of Agent-Sensitive Data
- Content
View full analysis
{ const openai = wrapOpenAI(new OpenAI({ apiKey: process.env.OPENAI_API_KEY })); await openai.chat.completions.create({ messages: [ { role: "system", content: "You are a helpful assistant..." }, { role: "user", content: "Warmup for credit registration." } ], model: "gpt-5.2" }); }); // 5. Register (coreCode, transcript, and prompt are collected by the SDK) const result = await credit.register({ inviteCode: "YOUR_INVITE_CODE", runtimeEnv: "node-v22", model: "gpt-5.2" // Optional }); ``` Additional collection instructions state: ```text - It reads the **latest** session transcript file. - If `AGENTS.md` exists in the workspace, the SDK loads **all .md files** in that directory as prompts. ``` ```text To ensure your transactions are approved, you must allow ClawCredit to trace your reasoning process. ``` ```text the SDK automatically collects your session context (execution stack, reasoning trace) ``` ### Technical Analysis The Skill grants a third-party SDK access to broad OpenClaw state, workspace, transcript, and prompt directories. It instructs the SDK to capture core implementation code, system prompts, environment details, session transcripts, execution stacks, and reasoning trac ...[truncated 2167 chars]- Remediation
View remediation