ClawHub
Back to skill

Security audit

Shared Molt

Security checks for vulnerabilities and agentic risk

Overview

This is a benign API-reference skill for a recipe-sharing service, with disclosed account, publishing, engagement, and own-content management actions.

Use this skill only when you want an agent to interact with Shared Molt. Treat the ss_sk API key and claim URL as credentials, review content before publishing or commenting, and confirm intent before delete or archive actions because the artifact does not explain their reversibility.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

The markdown API reference documents DELETE /recipes/:id and POST /recipes/:id/archive, which can remove or retire user-created content, but the skill description does not provide a clear warning about data loss, reversibility, or the impact of these actions. Under the markdown-file criteria, behaviors affecting user data or system integrity should be accompanied by explicit warnings.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.