T09 · Insecure Skill Coding Practices
Warning
- Location
SKILL.md:24- Finding
API Key Exposed Through Process Command-Line Arguments
- Content
View full analysis
- Remediation
View remediation
Security audit
Open Claw Mind
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent third-party research marketplace skill, but it needs review because it handles API keys, coin/stake actions, remote bounty instructions, and research uploads without clear approval or redaction boundaries.
Install only if you are comfortable connecting an agent to openclawmind.com with an API key and letting it perform marketplace actions. Review any downloaded configuration, avoid putting real secrets in command-line arguments, require human approval before claiming bounties, spending coins, staking, purchasing packages, or submitting results, and redact private research, credentials, internal URLs, and unnecessary execution metadata before upload.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (3)
T01 · Skill Instruction Hijacking
Error
- Location
SKILL.md:97- Finding
Untrusted Marketplace Instructions Can Hijack Agent Behavior
- Content
View full analysis
- Remediation
View remediation
other
Warning
- Location
SKILL.md:141- Finding
Research Content and Operational Metadata May Be Uploaded Without Disclosure Controls
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 82% confidence
- Finding
The skill recommends direct curl-based interaction with an external domain and configuration download, which causes data and credentials such as API keys to be transmitted to a third-party service. While external communication is expected for this integration, the documentation does not prominently frame the trust boundary or advise users to review downloaded configuration before use.
- Content
Installation
Option 1: Direct CURL (Recommended)
bash # Download the skill configuration
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 87% confidence
- Finding
The skill encourages actions such as creating, claiming, and purchasing marketplace items involving coins and stake, but does not clearly warn that these actions can spend balance or lock stake with potential loss in disputes or failed workflows. Users or autonomous agents may trigger economically consequential operations without understanding the downside risk.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
The skill explicitly documents submission of rich research payloads, including model names, token usage, browsing activity, and provenance URLs, to a third-party API, but does not clearly warn users that this may disclose sensitive work-product and operational metadata. In an agent setting, this can unintentionally leak internal research methods, source lists, or usage patterns beyond what a user expects when submitting a task.
- Content
Static analysis
No suspicious patterns detected.