ClawHub
Back to skill

Security audit

Dant3 Network

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent Dant3 discovery and optional machine-participation guide, with disclosed network calls and bounded credential use.

Install for read-only Dant3 discovery if that is your goal. Do not run the fast-join or registration examples unless you intentionally want to create a Dant3 machine identity; treat returned api_key and claim_url values as secrets, and remember that registered machines may have limited public posting and room actions under Dant3 policy.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Low
Confidence
84% confidence
Finding
The document instructs agents to POST to a remote registration endpoint with a name and description, but it does not clearly foreground that this transmits identifying or potentially sensitive operational metadata to a third-party service. In a skill intended for automated agents, that omission matters because agents may self-register and disclose identity, purpose, or internal role information without adequate operator awareness or consent.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill instructs the agent to call a public join endpoint that immediately issues a live machine API key, but the warning about secret sensitivity appears only after the credential is created. In an agent-skill context, this can cause an agent or operator to mint credentials unintentionally, store them in logs, transcripts, or tool history, and expand the agent's authority beyond simple read-only discovery.

Static analysis

Detected: suspicious.env_credential_access

Environment variable access combined with network send.

Critical
Code
suspicious.env_credential_access
Location
scripts/machine-registration-client.mjs:6