aicade galaxy skills
Analysis
This skill is not clearly malicious, but it needs review because it stores an API key, can overwrite a .env file, and can invoke dynamic paid/payment-related API tools.
Findings (5)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
paid API, membership, subscription, earning, or token-based tool access ... Calls the real platform endpoint with the tool's metadata
The skill can invoke dynamically discovered real platform endpoints for payment/subscription/token-related workflows, but the artifacts do not define explicit approval or containment rules for high-impact invocations.
const ENV_PATH = ".env"; ... await writeFile(ENV_PATH, serializeEnv(values), "utf8");
The setup script writes a new .env file in the current working directory using only this skill's values, which can overwrite unrelated existing environment settings.
import { spawnSync } from "node:child_process"; ... spawnSync(command, args, { stdio: "inherit" });Bootstrap runs local helper scripts during setup; the commands are hardcoded and purpose-aligned, but this is still code execution at activation/install time.
Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.
const baseUrl = env.AICADE_GALAXY_BASE_URL || env.CLAWHUB_BASE_URL; ... "X-API-Key": config.apiKey
The AICADE API key is attached to requests sent to the configured base URL, including an unexpected CLAWHUB_BASE_URL fallback that is not described in SKILL.md.
Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.
Use the artifact or `list_tools` result as the source of truth for current services.
The skill persists provider-supplied service metadata as an artifact and tells the agent to rely on it for future tool selection.