ClawHub
Back to skill

Security audit

Ainative Chat Completions

Security checks for vulnerabilities and agentic risk

Overview

This is a non-executable API guide whose network and credential use matches its purpose, but users should handle chat content and API keys carefully.

Before installing, verify that AINative and its SDK packages are providers you intend to trust. Keep real API keys server-side or in protected secret storage, avoid embedding long-lived keys in frontend bundles, and send only chat content that is appropriate to share with AINative under your privacy and compliance requirements.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill instructs users to send full conversation messages to a third-party API but does not warn that prompts, system messages, and user content leave the local environment and may contain sensitive or regulated data. In an agent setting, this omission can cause accidental exfiltration of secrets, personal data, or proprietary context because implementers may forward chat history by default.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The documentation includes API-key usage and even shows a client-side React provider configured with `apiKey: 'ak_your_key'` without a clear warning that secrets must not be embedded in frontend code. This can lead developers to expose long-lived credentials in browsers, source control, logs, or bundled assets, enabling unauthorized API use and account abuse.

Static analysis

Detected: suspicious.prompt_injection_instructions

Prompt-injection style instruction pattern detected.

Warn
Code
suspicious.prompt_injection_instructions
Location
SKILL.md:81