ClawHub
Back to skill

Security audit

redreplier-mean-marketer

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed RedReplier polling client that uses an API key to send recurring lead notifications and accountability messages.

Install this only if you want a scheduled RedReplier background notifier. Use a dedicated RedReplier token, limit where the job can send messages, confirm the 5-minute schedule is acceptable, and use the server config or stop the scheduled job if you no longer want automatic nudges.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
90% confidence
Finding
The skill clearly requires access to an environment secret (`REDREPLIER_API_KEY`) and outbound network access, but it does not explicitly declare permissions beyond informal metadata. That mismatch can cause hosts or reviewers to underestimate the skill's capabilities, especially since it directs operators to run scripts that contact a remote service and handle bearer tokens.

Session Persistence

Medium
Category
Rogue Agent
Content
## Run it on a schedule — READ THIS, it's the whole point

This skill does **not** poll by itself, and there is **no webhook** — RedReplier's API is
pull-based. Installing the skill only gives you a command. **You (the host agent) MUST create
a recurring job that runs that command**, or nothing will ever happen. This is a required
setup step, not optional.
Confidence
85% confidence
Finding
create a recurring job that runs that command**, or nothing will ever happen. This is a required setup step, not optional. **Cadence: every 5 minutes.** Reddit/X posts appear continuously, and a lead

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.