ClawHub
Back to skill

Security audit

Identitygram Signin

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed IdentityGram sign-in helper, but it exposes passwords and full authentication tokens through normal skill inputs and outputs without meaningful handling limits.

Install only if you trust this publisher and intend OpenClaw to handle IdentityGram credentials directly. Treat all returned token fields as secrets: avoid displaying, logging, storing, or passing them to other skills unless strictly necessary.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Credential Access

High
Category
Privilege Escalation
Content
- `raw`: Full response from IdentityGram API
- `success`: Boolean indicating if authentication was successful (if available)
- `token`: Authentication token (if available)
- `accessToken`: Access token (if available)
- `refreshToken`: Refresh token (if available)
- `user`: User information (if available)
- `message`: Status message (if available)
Confidence
97% confidence
Finding
Returning access tokens and refresh tokens as normal skill output creates a direct credential-access risk because any component that can read the skill result may reuse those tokens to impersonate the user. The inclusion of the full raw response further raises exposure risk by potentially disclosing additional secrets or personally identifiable information beyond the minimum needed for authentication flow control.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The README explicitly states that user email and password are sent to an external authentication endpoint, but it does not provide any warning, consent language, or guidance on secure handling of those credentials and returned tokens. In a skill ecosystem, this omission can mislead operators or users into supplying highly sensitive credentials without understanding the transmission and trust boundary, increasing phishing, credential exposure, and token leakage risk.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill is explicitly designed to collect credentials and return highly sensitive authentication artifacts, including raw API responses, access tokens, and refresh tokens, but it provides no warning, redaction guidance, or handling restrictions. In an agent ecosystem, exposing these values increases the risk of credential leakage through logs, downstream tool calls, chat history, or unauthorized reuse of session tokens.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
This skill collects user credentials and returns authentication tokens, including access and refresh tokens, in the exposed response mapping without any explicit warning, minimization, or handling constraints for sensitive data. In an agent ecosystem, exposing raw auth material increases the chance of credential or token leakage through logs, downstream tools, prompt context, or unintended reuse by other skills.

Static analysis

No suspicious patterns detected.