ClawHub
Back to skill

Security audit

Ship Paid App

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed SettleMesh deployment helper, but installing it means Codex may authenticate and deploy public, metered apps through SettleMesh.

Install this only if you want Codex to deploy projects through SettleMesh. Be comfortable with source code upload, a public run.settlemesh.io URL, cached SettleMesh authentication or API-key use, managed database/auth setup, and metered billing after confirmation.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The skill description contains broad triggers like 'build an app', 'ship', 'launch', and 'make it live', which can match many ordinary development requests and cause the skill to activate in situations the user did not explicitly intend. In this skill's context, over-triggering is more dangerous because activation can lead directly to networked deployment actions, creation of public endpoints, and possible billed operations.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill explicitly instructs the agent to run `settlemesh login` on its own, opening a browser and driving a one-time approval flow without first giving a clear user-facing warning. This is dangerous because it initiates credentialed authentication and can establish a cached session enabling subsequent paid, networked deployment actions, reducing meaningful user consent at a sensitive boundary.

Static analysis

No suspicious patterns detected.