Agent HQ

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI04: Agentic Supply Chain Vulnerabilities

What this means

You would be running code and dependencies from outside this skill package.

Why it was flagged

The setup relies on an external GitHub repository and npm dependency installation that are not bundled or pinned in the provided artifact.

Skill content

git clone https://github.com/thibautrey/agent-hq.git
cd agent-hq
npm install
npm --prefix frontend-react install

Recommendation

Review the repository, pin a trusted tag or commit, and inspect dependency files before installing.

NoteHigh Confidence

ASI03: Identity and Privilege Abuse

What this means

If these credentials are mishandled, someone could send messages through your Telegram bot or learn the target chat.

Why it was flagged

The skill expects Telegram credentials for notifications, which is purpose-aligned but sensitive and not declared in the registry credential requirements.

Skill content

Edit `config/telegram.json` with your `botToken`/`chatId` (or set `AGENT_HQ_TELEGRAM_TOKEN`/`AGENT_HQ_TELEGRAM_CHAT_ID`). Keep this file secret.

Recommendation

Use a dedicated low-privilege bot, keep the config file out of source control, set an API token for mutating endpoints, and rotate tokens if exposed.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

If the service is exposed without protection, others could potentially create board changes or trigger alerts.

Why it was flagged

The runtime API includes an endpoint that can trigger an outgoing Telegram notification; this is expected for an alerting stack but should remain controlled.

Skill content

Trigger Telegram alert: `curl -X POST http://localhost:4000/api/notify-telegram`

Recommendation

Keep the service bound to trusted networks, enable `AGENT_HQ_API_TOKEN`, and avoid exposing the API publicly without authentication.

NoteHigh Confidence

ASI10: Rogue Agents

What this means

Notifications or heartbeats may continue running until the cron job is disabled.

Why it was flagged

The skill describes scheduled background notification jobs, which are disclosed and purpose-aligned but create ongoing automation after setup.

Skill content

Configure cron jobs (Heartbeats + Telegram): ... Telegram notifier cron (see `run-telegram-notifier.sh`).

Recommendation

Install cron jobs only if needed, run them under an unprivileged account, and document how to disable or remove them.