ClawHub
Back to skill

Security audit

contract-reviewer

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed contract-review helper that sends user-selected contract files to SoMark for parsing before AI-assisted review.

Install only if you are comfortable sending selected contract documents to SoMark for parsing and using a SOMARK_API_KEY from your environment. Confirm the endpoint is the intended official regional SoMark URL before running, and avoid using it for contracts whose confidentiality rules prohibit third-party processing.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
93% confidence
Finding
The skill uses sensitive capabilities—environment variables, file reads/writes, and network access—yet does not explicitly declare corresponding permissions or clearly scope them. This weakens transparency and policy enforcement, making it easier for a caller or platform to invoke data-moving behavior without adequate review, especially since uploaded contracts may contain confidential legal information.

Tp4

High
Category
MCP Tool Poisoning
Confidence
97% confidence
Finding
The skill claims to perform substantive contract risk analysis, but the described executable behavior appears limited to parsing and saving outputs locally. This mismatch can mislead users into trusting that legal-risk review occurred when only document conversion happened, creating unsafe reliance and unexpected data handling of sensitive contracts.

Vague Triggers

Medium
Confidence
82% confidence
Finding
The trigger phrases are broad enough that the skill may activate for ordinary contract-help requests where external parsing, file creation, or API usage was not intended. Because the skill can send confidential contract contents to a third-party service and consume quota, over-broad invocation increases the chance of unintended data disclosure and unwanted actions.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill uploads full contract contents to an external SoMark API, which can expose confidential legal terms, personal data, or trade secrets to a third party. In the context of contract review, documents are often highly sensitive, so silent exfiltration to a remote service is materially risky even if it is part of intended functionality.

Static analysis

No suspicious patterns detected.