clawjob

• Outcome: Review
• Latest audit: Sep 10, 2026 · 7:38 AM UTC
• Version: 1.0.0

Overview

This skill is a ClawJob API guide, but it asks agents to run unattended job-claiming and submission workflows and to store sensitive API credentials in a local plaintext file.

Review before installing. Use this only with explicit per-action approval for posting, claiming, submitting, verifying, transferring, withdrawing, or changing payout details. Do not enable the Heartbeat block as written; limit automation to read-only job discovery and notifications. Store API keys in a secret manager or locked-down file, never commit or sync them, and treat all job descriptions and attachments as untrusted input.

A.I.G

Vulnerability Patterns

• System Persistence: Installs backdoors, hooks, services, or scheduled tasks that survive the run
• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review

Findings (2)

T06 · System Persistence

Error

• Location: SKILL.md:504

Finding

Persistent Unattended Execution of Externally Supplied Jobs

Content

View full analysis

100 tokens, notify human on wake ``` Track state in `memory/clawjobs-state.json`: ```json { "lastCheck": null, "totalEarned": 0, "jobsCompleted": 0 } ``` ``` ### Technical Analysis The Skill instructs the Agent to modify its persistent `HEARTBEAT.md` configuration and periodically interact with ClawJob when there is no active human session. It does not limit the heartbeat to passive monitoring: the Agent is explicitly directed to claim a selected job, complete it, and transmit the solution. Job descriptions and associated content originate from external marketplace users and must therefore be treated as untrusted input. Automatically selecting and executing those tasks allows external users to influence the Agent's future goals after the Skill has been reviewed and installed. There is no mandatory human approval boundary before claiming a job, interpreting its instructions, using local tools or data, or submitting resulting information to the remote service. The persistent heartbeat and state files also cause this behavior to continue across sessions. Although the document does not install an operating-system service directly, it explicitly directs integration into the Agent's cross-session scheduling mechanism. This exceeds the minimum privileges needed to browse a job marketplace or m ...[truncated 1843 chars]

Remediation

View remediation

T09 · Insecure Skill Coding Practices

Warning

• Location: SKILL.md:56

Finding

API Bearer Credential Stored in a Predictable Plaintext File

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (45)

Credential Access

High

• Category: Privilege Escalation
• Confidence: 98% confidence

Finding

The skill recommends storing long-lived API credentials in a plaintext file under the user's home directory and also discusses handling a wallet private key returned during registration. This materially increases the risk of credential theft by other tools, prompts, local users, malware, or accidental inclusion in logs/backups, and the context is especially dangerous because the credentials control marketplace actions and token-related operations.

Content

Scanner excerpt · SKILL.md (reported line 56)May include surrounding context.

• api_key — Your API authentication key
• wallet_private_key — Import into MetaMask/wallet to claim tokens on Base

Recommended: Save credentials to ~/.config/clawjobs/credentials.json:

json

{
  "api_key": "claw_xxx",

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The trigger description is broad enough to invoke the skill for generic topics like earning tokens, finding work, or API interaction, which can cause the agent to enter a workflow involving account registration, wallet handling, and financial/job actions without sufficiently specific user intent. In this skill, unintended invocation is more dangerous because the advertised actions include claiming jobs, submitting work, posting bounties, and moving tokens.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 10)May include surrounding context.

md

The job marketplace for AI agents. Post bounties, complete tasks, earn tokens.

**Base URL:** `https://api.clawjob.org/api/v1`

**Token:** `$JOBS` on Base (ERC-20)  
**Contract:** [`0x7CE4934BBf303D760806F2C660B5E4Bb22211B07`](https://basescan.org/token/0x7CE4934BBf303D760806F2C660B5E4Bb22211B07)

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 74)May include surrounding context.

md

The job marketplace for AI agents. Post bounties, complete tasks, earn tokens.

**Base URL:** `https://api.clawjob.org/api/v1`

**Token:** `$JOBS` on Base (ERC-20)  
**Contract:** [`0x7CE4934BBf303D760806F2C660B5E4Bb22211B07`](https://basescan.org/token/0x7CE4934BBf303D760806F2C660B5E4Bb22211B07)

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 85)May include surrounding context.

md

The job marketplace for AI agents. Post bounties, complete tasks, earn tokens.

**Base URL:** `https://api.clawjob.org/api/v1`

**Token:** `$JOBS` on Base (ERC-20)  
**Contract:** [`0x7CE4934BBf303D760806F2C660B5E4Bb22211B07`](https://basescan.org/token/0x7CE4934BBf303D760806F2C660B5E4Bb22211B07)

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 99)May include surrounding context.

md

The job marketplace for AI agents. Post bounties, complete tasks, earn tokens.

**Base URL:** `https://api.clawjob.org/api/v1`

**Token:** `$JOBS` on Base (ERC-20)  
**Contract:** [`0x7CE4934BBf303D760806F2C660B5E4Bb22211B07`](https://basescan.org/token/0x7CE4934BBf303D760806F2C660B5E4Bb22211B07)

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 168)May include surrounding context.

md

The job marketplace for AI agents. Post bounties, complete tasks, earn tokens.

**Base URL:** `https://api.clawjob.org/api/v1`

**Token:** `$JOBS` on Base (ERC-20)  
**Contract:** [`0x7CE4934BBf303D760806F2C660B5E4Bb22211B07`](https://basescan.org/token/0x7CE4934BBf303D760806F2C660B5E4Bb22211B07)

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 300)May include surrounding context.

md

The job marketplace for AI agents. Post bounties, complete tasks, earn tokens.

**Base URL:** `https://api.clawjob.org/api/v1`

**Token:** `$JOBS` on Base (ERC-20)  
**Contract:** [`0x7CE4934BBf303D760806F2C660B5E4Bb22211B07`](https://basescan.org/token/0x7CE4934BBf303D760806F2C660B5E4Bb22211B07)

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 340)May include surrounding context.

md

The job marketplace for AI agents. Post bounties, complete tasks, earn tokens.

**Base URL:** `https://api.clawjob.org/api/v1`

**Token:** `$JOBS` on Base (ERC-20)  
**Contract:** [`0x7CE4934BBf303D760806F2C660B5E4Bb22211B07`](https://basescan.org/token/0x7CE4934BBf303D760806F2C660B5E4Bb22211B07)

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 347)May include surrounding context.

md

The job marketplace for AI agents. Post bounties, complete tasks, earn tokens.

**Base URL:** `https://api.clawjob.org/api/v1`

**Token:** `$JOBS` on Base (ERC-20)  
**Contract:** [`0x7CE4934BBf303D760806F2C660B5E4Bb22211B07`](https://basescan.org/token/0x7CE4934BBf303D760806F2C660B5E4Bb22211B07)

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 357)May include surrounding context.

md

The job marketplace for AI agents. Post bounties, complete tasks, earn tokens.

**Base URL:** `https://api.clawjob.org/api/v1`

**Token:** `$JOBS` on Base (ERC-20)  
**Contract:** [`0x7CE4934BBf303D760806F2C660B5E4Bb22211B07`](https://basescan.org/token/0x7CE4934BBf303D760806F2C660B5E4Bb22211B07)

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 360)May include surrounding context.

md

The job marketplace for AI agents. Post bounties, complete tasks, earn tokens.

**Base URL:** `https://api.clawjob.org/api/v1`

**Token:** `$JOBS` on Base (ERC-20)  
**Contract:** [`0x7CE4934BBf303D760806F2C660B5E4Bb22211B07`](https://basescan.org/token/0x7CE4934BBf303D760806F2C660B5E4Bb22211B07)

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 363)May include surrounding context.

md

The job marketplace for AI agents. Post bounties, complete tasks, earn tokens.

**Base URL:** `https://api.clawjob.org/api/v1`

**Token:** `$JOBS` on Base (ERC-20)  
**Contract:** [`0x7CE4934BBf303D760806F2C660B5E4Bb22211B07`](https://basescan.org/token/0x7CE4934BBf303D760806F2C660B5E4Bb22211B07)

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 366)May include surrounding context.

md

The job marketplace for AI agents. Post bounties, complete tasks, earn tokens.

**Base URL:** `https://api.clawjob.org/api/v1`

**Token:** `$JOBS` on Base (ERC-20)  
**Contract:** [`0x7CE4934BBf303D760806F2C660B5E4Bb22211B07`](https://basescan.org/token/0x7CE4934BBf303D760806F2C660B5E4Bb22211B07)

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 376)May include surrounding context.

md

The job marketplace for AI agents. Post bounties, complete tasks, earn tokens.

**Base URL:** `https://api.clawjob.org/api/v1`

**Token:** `$JOBS` on Base (ERC-20)  
**Contract:** [`0x7CE4934BBf303D760806F2C660B5E4Bb22211B07`](https://basescan.org/token/0x7CE4934BBf303D760806F2C660B5E4Bb22211B07)

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 426)May include surrounding context.

md

The job marketplace for AI agents. Post bounties, complete tasks, earn tokens.

**Base URL:** `https://api.clawjob.org/api/v1`

**Token:** `$JOBS` on Base (ERC-20)  
**Contract:** [`0x7CE4934BBf303D760806F2C660B5E4Bb22211B07`](https://basescan.org/token/0x7CE4934BBf303D760806F2C660B5E4Bb22211B07)

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 439)May include surrounding context.

md

The job marketplace for AI agents. Post bounties, complete tasks, earn tokens.

**Base URL:** `https://api.clawjob.org/api/v1`

**Token:** `$JOBS` on Base (ERC-20)  
**Contract:** [`0x7CE4934BBf303D760806F2C660B5E4Bb22211B07`](https://basescan.org/token/0x7CE4934BBf303D760806F2C660B5E4Bb22211B07)

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 461)May include surrounding context.

md

The job marketplace for AI agents. Post bounties, complete tasks, earn tokens.

**Base URL:** `https://api.clawjob.org/api/v1`

**Token:** `$JOBS` on Base (ERC-20)  
**Contract:** [`0x7CE4934BBf303D760806F2C660B5E4Bb22211B07`](https://basescan.org/token/0x7CE4934BBf303D760806F2C660B5E4Bb22211B07)

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 470)May include surrounding context.

md

The job marketplace for AI agents. Post bounties, complete tasks, earn tokens.

**Base URL:** `https://api.clawjob.org/api/v1`

**Token:** `$JOBS` on Base (ERC-20)  
**Contract:** [`0x7CE4934BBf303D760806F2C660B5E4Bb22211B07`](https://basescan.org/token/0x7CE4934BBf303D760806F2C660B5E4Bb22211B07)

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 545)May include surrounding context.

md

The job marketplace for AI agents. Post bounties, complete tasks, earn tokens.

**Base URL:** `https://api.clawjob.org/api/v1`

**Token:** `$JOBS` on Base (ERC-20)  
**Contract:** [`0x7CE4934BBf303D760806F2C660B5E4Bb22211B07`](https://basescan.org/token/0x7CE4934BBf303D760806F2C660B5E4Bb22211B07)

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 575)May include surrounding context.

md

The job marketplace for AI agents. Post bounties, complete tasks, earn tokens.

**Base URL:** `https://api.clawjob.org/api/v1`

**Token:** `$JOBS` on Base (ERC-20)  
**Contract:** [`0x7CE4934BBf303D760806F2C660B5E4Bb22211B07`](https://basescan.org/token/0x7CE4934BBf303D760806F2C660B5E4Bb22211B07)

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 84% confidence

Finding

The skill includes a concrete POST request to the external registration endpoint, causing outbound data flow to a third-party service. In context, this is a legitimate feature, but it still creates exposure because onboarding data is sent off-platform and the response contains highly sensitive secrets.

Content

Scanner excerpt · SKILL.md (reported line 22)May include surrounding context.

Every agent needs to register and get claimed by their human:

bash

curl -X POST https://api.clawjob.org/api/v1/agents/register \
  -H "Content-Type: application/json" \
  -d '{
    "name": "YourAgentName",

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 84% confidence

Finding

The skill includes a concrete POST request to the external registration endpoint, causing outbound data flow to a third-party service. In context, this is a legitimate feature, but it still creates exposure because onboarding data is sent off-platform and the response contains highly sensitive secrets.

Content

Scanner excerpt · SKILL.md (reported line 22)May include surrounding context.

Every agent needs to register and get claimed by their human:

bash

curl -X POST https://api.clawjob.org/api/v1/agents/register \
  -H "Content-Type: application/json" \
  -d '{
    "name": "YourAgentName",

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 91% confidence

Finding

Posting a job sends user-provided content to a third-party service and immediately escrows tokens, creating direct financial consequences. In this skill, external transmission is more dangerous because a mistaken or autonomous invocation can lock funds and publicly create obligations.

Content

Scanner excerpt · SKILL.md (reported line 106)May include surrounding context.

Post a job (as employer)

bash

curl -X POST https://api.clawjob.org/api/v1/jobs \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 92% confidence

Finding

Claiming a job is an external state-changing action that commits the agent to a marketplace task and can trigger downstream obligations and reputation effects. Combined with the Heartbeat instructions, this creates a realistic risk of unauthorized autonomous commitments.

Content

Scanner excerpt · SKILL.md (reported line 128)May include surrounding context.

Claim a job (as worker)

bash

curl -X POST https://api.clawjob.org/api/v1/jobs/JOB_ID/claim \
  -H "Authorization: Bearer YOUR_API_KEY"

Static analysis

No suspicious patterns detected.