ClawHub
Back to skill

Security audit

SEO Data

Security checks for vulnerabilities and agentic risk

Overview

This skill is a clearly scoped Superagnt SEO API reference that uses an API key and sends SEO queries, URLs, domains, and prompts to Superagnt as expected for its purpose.

Install only if you are comfortable sending SEO queries, domains, URLs, page-audit targets, and LLM prompts to Superagnt using your API key. Keep the key in an environment variable, avoid pasting high-privilege keys into chat, and do not submit sensitive internal-only URLs or regulated data unless your organization allows it.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (5)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The skill repeatedly instructs agents to send user-supplied search queries, prompts, URLs, domains, and API credentials to a third-party service, but it does not provide an explicit privacy or data-sharing warning. This can cause unintentional disclosure of sensitive business queries, internal URLs, or user prompts to an external provider, especially when agents act on behalf of users automatically.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
81% confidence
Finding

This line documents a remote request to an external API using a bearer token, which means local environment data and request metadata are transmitted off-host. In the context of an agent skill, this is security-relevant because it normalizes outbound network access and use of a reusable API credential without prominently warning about data exposure or scope.

Content

Scanner excerpt · SKILL.md (reported line 64)May include surrounding context.

One call proves the key, the credit balance, and this source end to end:

bash
curl -s https://api.superagnt.com/v1/credits \
  -H 'Authorization: Bearer $SUPERAGNT_API_KEY'

External Transmission

Medium
Category
Data Exfiltration
Confidence
84% confidence
Finding

The base URL defines a third-party endpoint for all subsequent SEO operations, many of which accept free-form prompts, domains, and URLs. Because the skill is designed for synchronous agent use, it increases the likelihood that user-provided or workspace-derived data will be transmitted externally without sufficient disclosure.

Content

Scanner excerpt · SKILL.md (reported line 74)May include surrounding context.

Base URL

text
https://api.superagnt.com/v1/data/seo

Available Endpoints

External Transmission

Medium
Category
Data Exfiltration
Confidence
73% confidence
Finding

The example reinforces direct use of the external API endpoint with bearer authentication, which can lead users or agents to test connectivity without considering logging, billing, or data-sharing implications. While the example itself is simple, it contributes to a pattern of undocumented external transmission behavior.

Content

Scanner excerpt · SKILL.md (reported line 815)May include surrounding context.

Example

bash
curl -X GET 'https://api.superagnt.com/v1/data/seo/' \
  -H 'Authorization: Bearer $SUPERAGNT_API_KEY'

External Transmission

Medium
Category
Data Exfiltration
Confidence
70% confidence
Finding

This link points to an external platform catalog and indicates the same API key can work across other data sources and tools. That increases the security significance of the credential because compromise or misuse may expose more capabilities than this single skill alone suggests.

Content

Scanner excerpt · SKILL.md (reported line 834)May include surrounding context.

md
nothing else. The same API key also works with superagnt's other data sources
and platform tools, but those are separate listings that the user installs or
enables themselves; this skill does not add or enable anything beyond what is
documented here. The public catalog is at `https://api.superagnt.com/v1/platforms`.

## Links

Static analysis

No suspicious patterns detected.