ClawHub
Back to skill

Security audit

Sell Live Dataset

Security checks for vulnerabilities and agentic risk

Overview

This prompt-only skill is transparently about using SettleMesh to publish and bill for paid APIs, with expected but important account-authentication and billing implications.

Install only if you want an agent to authenticate with SettleMesh and create or manage paid public APIs on your behalf. Review pricing manifests before publishing, understand that login may cache a reusable session, and use a scoped key or logout/cleanup process if you do not want the session or deployed services to persist.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill explicitly tells the agent to run `settlemesh login` on its own, open a browser for approval, poll until approved, and cache a session, while also telling it not to stop and ask the user to log in manually. This can trigger authentication side effects and persistent credential/session creation without clear, prior user consent, which is especially risky because the same skill later performs authenticated publishing and billing-related actions against an external platform.

Static analysis

No suspicious patterns detected.