ClawHub
Back to skill

Security audit

OtterKit Tunnel

Security checks for vulnerabilities and agentic risk

Overview

This skill does what it says: it helps create OtterKit public tunnels and webhook endpoints, with some normal exposure and credential risks users should understand.

Install only if you want OtterKit to create public tunnel or webhook endpoints for your local services. Protect ~/.otterkit/credentials.json and OTTERKIT_TOKEN like account secrets, avoid exposing admin or unauthenticated local services, prefer short TTLs, use auth or signature verification, and stop tunnels when they are no longer needed.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill’s core function is to expose localhost services to the public internet, but it does not present a prominent upfront warning about the security consequences of making a local service reachable externally. Users may expose development servers, admin panels, or webhook handlers without understanding the expanded attack surface, leading to unauthorized access or probing from the internet.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill instructs users to store credentials in ~/.otterkit/credentials.json or set OTTERKIT_TOKEN for headless environments, but it does not explicitly warn that these secrets grant tunnel/webhook provisioning capability and must be protected. If these credentials are leaked through shell history, environment dumps, logs, backups, or multi-user systems, an attacker could create or control public endpoints tied to the user account.

Static analysis

No suspicious patterns detected.