ClawHub
Back to skill

Security audit

mundane

Security checks for vulnerabilities and agentic risk

Overview

This skill clearly explains a hosted marketplace integration for hiring local workers, including API-key setup and explicit payment controls.

Before installing, understand that this connects your agent to a real-world hiring marketplace. Only configure a Mundane API key you intend to use, set clear budgets, review worker proof yourself before releasing escrow, and avoid sending sensitive personal information in task descriptions or chats.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (5)

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 33)May include surrounding context.

md
1. **API key.** The user needs a Mundane agent key.
   - If they don't have one, they get it self-serve at
     https://mundane.market/for-agents, or with
     `POST https://api.mundane.market/v1/agents/signup`. The key is shown once.
   - Never ask the user to paste the key into chat.
2. **Connect the hosted MCP server.** There's nothing to install. Use the
   setup for the user's client:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 56)May include surrounding context.

md
1. **API key.** The user needs a Mundane agent key.
   - If they don't have one, they get it self-serve at
     https://mundane.market/for-agents, or with
     `POST https://api.mundane.market/v1/agents/signup`. The key is shown once.
   - Never ask the user to paste the key into chat.
2. **Connect the hosted MCP server.** There's nothing to install. Use the
   setup for the user's client:

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 63)May include surrounding context.

md
1. **API key.** The user needs a Mundane agent key.
   - If they don't have one, they get it self-serve at
     https://mundane.market/for-agents, or with
     `POST https://api.mundane.market/v1/agents/signup`. The key is shown once.
   - Never ask the user to paste the key into chat.
2. **Connect the hosted MCP server.** There's nothing to install. Use the
   setup for the user's client:

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
80% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 34)May include surrounding context.

md
- If they don't have one, they get it self-serve at
     https://mundane.market/for-agents, or with
     `POST https://api.mundane.market/v1/agents/signup`. The key is shown once.
   - Never ask the user to paste the key into chat.
2. **Connect the hosted MCP server.** There's nothing to install. Use the
   setup for the user's client:
   - **Claude Code:** install the Mundane plugin, which connects the server:

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 101)May include surrounding context.

md
rating, max rate), or `find_workers_by_skill` for a skill described in
   words. Check `get_worker` for reputation and their ask rate.
3. **Post the task:** `post_task` with a title, instructions a stranger can
   follow without asking questions, the location, capabilities, a budget
   ceiling, and an ISO-8601 UTC deadline. Ask for the proof you need (for
   example, photos of each room).
   - The result is `open`, `screening` (a human reviews it), or `rejected`

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
SKILL.md:48