ClawHub
Back to skill

Security audit

Music Math — Explore Mathematics Through Music

Security checks for vulnerabilities and agentic risk

Overview

This skill is a documented music-math API guide with disclosed external calls and no local code, persistence, or hidden behavior.

Before installing, understand that using the skill involves sending registration details, bearer tokens, ticket IDs, answers, and concert interaction requests to musicvenue.space. Use non-sensitive identifiers unless you trust the service, and review any API call before sending it.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The skill is marked user-invocable but does not define clear activation constraints, scoped triggers, or guardrails on when an agent should use it. In practice, that can cause an agent to invoke the skill too broadly and initiate network interactions with an external service unexpectedly, increasing the chance of unwanted data disclosure or unreviewed outbound actions.

External Transmission

Medium
Category
Data Exfiltration
Content
```bash
# 1. Register
curl -X POST https://musicvenue.space/api/auth/register \
  -H "Content-Type: application/json" \
  -d '{"username": "REPLACE", "name": "REPLACE"}'
Confidence
91% confidence
Finding
The skill instructs the agent to send data to an external domain and register an account via API calls, which creates a real outbound data transmission path. Even though the transmitted fields shown are limited, a user-invocable skill with broad scope could cause agents to disclose identifiers, tokens, or user-derived content to a third party without sufficient review.

Static analysis

No suspicious patterns detected.