ClawHub
Back to skill

Security audit

Postqued API

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent Postqued integration that can publish and manage social media content, with the risky actions disclosed and gated by scope checks, dry runs, or confirmation.

Install this only if you want an agent to operate your Postqued workspaces. Use the least-privileged API key available, verify the selected workspace and connected account before approving actions, and require explicit review for publishing, deleting, disconnecting accounts, changing collaborators, or posting comments.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Memory PoisoningPersistent Context Injection, Context Window Stuffing, Memory Manipulation
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (10)

Credential Access

High
Category
Privilege Escalation
Confidence
70% confidence
Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 113)May include surrounding context.

md
- Check `get_workspace_capabilities` before additive workspace or collaboration actions when entitlement is uncertain.
- Use `get_billing_status` and `get_billing_usage` only for read-only account context; do not attempt checkout through MCP.
- Poll durable Postqued state instead of assuming provider success from an accepted request.
- Do not expose raw access tokens, presigned URLs, API keys, or private response fields in user-facing output.
- Summarize API errors by status, code, and safe message. Do not fabricate success after a timeout or partial failure.

## References

Memory Manipulation

High
Category
Memory Poisoning
Confidence
85% confidence
Finding

Skill manipulates agent memory, state, or stored context. Memory corruption can alter personality, override safety rules, or cause unpredictable behavior.

Content

Scanner excerpt · references/mcp-tools.md (reported line 25)May include surrounding context.

md
- Tool output is structured JSON under `result` and also includes a concise text representation.
- Read tools are non-mutating. Provider reads can contact external social networks.
- Write tools change Postqued state. Provider writes can create externally visible effects.
- Destructive tools can publish, cancel, hide, delete, disconnect, revoke, remove, approve, or otherwise replace state.

## Workspaces and account context

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 30)May include surrounding context.

text
Base URL: https://api.postqued.com
OpenAPI:  https://api.postqued.com/v2/docs/openapi.json
Header:   Authorization: Bearer $POSTQUED_API_KEY

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api.md (reported line 19)May include surrounding context.

text
Base URL: https://api.postqued.com
OpenAPI:  https://api.postqued.com/v2/docs/openapi.json
Header:   Authorization: Bearer $POSTQUED_API_KEY

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api.md (reported line 28)May include surrounding context.

text
Base URL: https://api.postqued.com
OpenAPI:  https://api.postqued.com/v2/docs/openapi.json
Header:   Authorization: Bearer $POSTQUED_API_KEY

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api.md (reported line 143)May include surrounding context.

text
Base URL: https://api.postqued.com
OpenAPI:  https://api.postqued.com/v2/docs/openapi.json
Header:   Authorization: Bearer $POSTQUED_API_KEY

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api.md (reported line 157)May include surrounding context.

text
Base URL: https://api.postqued.com
OpenAPI:  https://api.postqued.com/v2/docs/openapi.json
Header:   Authorization: Bearer $POSTQUED_API_KEY

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api.md (reported line 180)May include surrounding context.

text
Base URL: https://api.postqued.com
OpenAPI:  https://api.postqued.com/v2/docs/openapi.json
Header:   Authorization: Bearer $POSTQUED_API_KEY

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The API reference documents numerous destructive and account-affecting operations such as disconnecting accounts, deleting assets, canceling publishes, changing memberships, and suspending access, but it does not consistently warn that these actions can cause irreversible changes. In an agent skill context, this increases the risk that an automated system will perform high-impact writes without explicit user confirmation or clear safety gating.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api.md (reported line 143)May include surrounding context.

Start the upload:

bash
curl --fail-with-body -X POST https://api.postqued.com/v2/content/upload \
  -H "Authorization: Bearer $POSTQUED_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{

Static analysis

No suspicious patterns detected.