ClawHub
Back to skill

Security audit

Channel Bridge

Security checks for vulnerabilities and agentic risk

Overview

The skill is a coherent message-routing library, but its documented filters can fail open and route messages more broadly than users configured.

Install only if you are comfortable reviewing and controlling every route yourself. Do not use this for confidential, regulated, or private channels until filters are fixed to fail closed, advertised channel filters are actually enforced, sender matching is exact, and each destination is explicitly approved.

A.I.G

Vulnerability Patterns
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T09 · Insecure Skill Coding Practices

Error
Location
src/channel-bridge.js:50
Finding

Fail-Open and Substring-Based Filters Allow Unauthorized Cross-Channel Message Routing

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (6)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The description says the skill 'routes messages between' platforms but does not specify what user action, command, or context activates it. For a markdown skill description, this is an ambiguous trigger surface that could lead to unintended invocation because no explicit trigger phrases, constraints, or exclusion conditions are provided.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The use cases encourage forwarding content across Discord, Slack, Telegram, Signal, email, SMS, and WhatsApp without prominently warning that sensitive or regulated data may be replicated into less trusted platforms. This can lead users to unintentionally exfiltrate internal messages, secrets, personal data, or compliance-scoped information across channels with different retention, access, and security properties.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The skill advertises broad any-to-any message routing across multiple external platforms without stating clear activation boundaries, authorization checks, or restrictions on what content may be forwarded. In a cross-channel context, this can enable accidental or unsafe propagation of sensitive data, internal messages, or prompt content between platforms with different trust levels and retention properties.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

This code routes, transforms, and buffers message contents across destinations, which can transmit user or system data between platforms. There is no confirmation prompt, logging, print statement, or explanatory comment/docstring warning users that message content may be forwarded or retained in a digest buffer.

Content

No source excerpt is available for this finding.

Scope Creep

Low
Category
Excessive Agency
Confidence
70% confidence
Finding

Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.

Content

Scanner excerpt · README.md (reported line 56)May include surrounding context.

md
**USE AT YOUR OWN RISK.**

- The author(s) are NOT liable for any damages, losses, or consequences arising from 
  the use or misuse of this software — including but not limited to financial loss, 
  data loss, security breaches, business interruption, or any indirect/consequential damages.
- This software does NOT constitute financial, legal, trading, or professional advice.
- Users are solely responsible for evaluating whether this software is suitable for

Scope Creep

Low
Category
Excessive Agency
Confidence
70% confidence
Finding

Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.

Content

Scanner excerpt · SKILL.md (reported line 69)May include surrounding context.

md
**USE AT YOUR OWN RISK.**

- The author(s) are NOT liable for any damages, losses, or consequences arising from 
  the use or misuse of this software — including but not limited to financial loss, 
  data loss, security breaches, business interruption, or any indirect/consequential damages.
- This software does NOT constitute financial, legal, trading, or professional advice.
- Users are solely responsible for evaluating whether this software is suitable for

Static analysis

No suspicious patterns detected.