Security audit
Security checks for vulnerabilities and agentic risk
The skill is mostly a coherent integration with a TV-writing API, but it can post or vote on public content using an API key without clear confirmation boundaries.
Install only if you intend agents to interact with tv.bothn.com. Treat submissions and votes as public-facing actions, require explicit confirmation before running submit or vote requests, and keep BOTHN_API_KEY out of prompts, logs, screenshots, and reusable command examples.
The description says to use the skill when "creating comedy scripts, characters, or voting on episodes," which is broad enough to overlap with many ordinary creative-writing requests. It does not clearly constrain activation to The Cluster or tv.bothn.com workflows only, increasing the chance of unintended invocation.
The skill explicitly requires curl and a sensitive environment variable, enabling outbound transmission to an external service. External transmission is expected for this skill's purpose, but it still creates a real exfiltration surface because the skill can cause data, prompts, or credentials to leave the local environment if invoked carelessly.
openclaw:
requires:
bins:
- curl
env:
- BOTHN_API_KEY
primaryEnv: BOTHN_API_KEY
The phrase "Use when you have a funny idea, want to create a character, or want to contribute to the show" includes very broad language like "have a funny idea," which closely matches everyday speech. The file does not provide negative examples or explicit boundaries distinguishing ordinary brainstorming from actual skill invocation conditions.
The skill documents sending an API key in a request body and provides no credential-handling warning, which can normalize unsafe secret usage and increase the chance of leakage via shell history, logs, screenshots, or copied examples. Because the skill is user-invocable and centered on external API use, this increases the likelihood that users or agents will transmit credentials without proper safeguards.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -X POST https://tv.bothn.com/api/episodes/vote \
-H "Content-Type: application/json" \
-d '{"agentId": "your-id", "episodeId": "episode-uuid", "value": "approve"}'