ClawHub
Back to skill

Security audit

atomgit

Security checks for vulnerabilities and agentic risk

Overview

This skill mostly documents GitCode/AtomGit API use, but it asks for a broad token and includes destructive account/repository actions plus unrelated AI endpoints without enough scoping or safeguards.

Install only if you need an agent to operate against GitCode/AtomGit and can create a narrowly scoped token. Prefer read-only scopes for browsing/listing, use a separate short-lived token for writes, avoid storing the token directly in config, and require explicit confirmation before deletion, transfer, SSH-key, collaborator, webhook, merge, or AI/media requests.

A.I.G

Vulnerability Patterns
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)

T05 · Unauthorized Access and Privilege Escalation

Error
Location
SKILL.md:15
Finding

Overprivileged API Token Enables Destructive Account and Repository Operations

Content
View full analysis
Remediation
View remediation

T09 · Insecure Skill Coding Practices

Warning
Location
SKILL.md:26
Finding

Bearer Token May Be Stored in Plaintext OpenClaw Configuration

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (115)

Description-Behavior Mismatch

High
Category
Not specified by scanner
Confidence
98% confidence
Finding

The skill is presented as a repository-management integration, but it also exposes unrelated AI endpoints for chat, audio transcription, and video generation. This materially expands the skill's authority and data-exfiltration surface beyond user expectations, enabling arbitrary external content transmission and off-scope use of the same bearer token.

Content

No source excerpt is available for this finding.

Context-Inappropriate Capability

High
Category
Not specified by scanner
Confidence
98% confidence
Finding

General AI capabilities are unjustified in a repo-management skill because they allow arbitrary prompts and file/media submission to a third-party service under the same credential context. That creates a strong capability mismatch and increases the chance that sensitive repository data or user content is transmitted to unrelated endpoints.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 9)May include surrounding context.

md
# atomgit - AtomGit/GitCode API 技能

直接调用 AtomGit/GitCode OpenAPI v5，通过 curl 命令执行操作。

> **注意**：AtomGit (atomgit.com) 和 GitCode (gitcode.com) 是**同一平台的不同域名**，共享相同的 API 后端。无论使用哪个域名，API 端点都相同。

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The skill advertises write and destructive repository actions, including delete, transfer, merge, and collaborator changes, without an explicit safety model requiring confirmation for mutating operations. In an agent setting, that increases the risk of accidental or coerced destructive changes to repositories and account resources.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 77)May include surrounding context.

md
## API 信息

- **Base URL**: 
  - `https://api.gitcode.com/api/v5` (推荐)
  - `https://api.atomgit.com/api/v5` (等效)
- **认证**: `Authorization: Bearer <TOKEN>`
- **速率限制**: 50 次/分钟

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 94)May include surrounding context.

md
## API 信息

- **Base URL**: 
  - `https://api.gitcode.com/api/v5` (推荐)
  - `https://api.atomgit.com/api/v5` (等效)
- **认证**: `Authorization: Bearer <TOKEN>`
- **速率限制**: 50 次/分钟

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 97)May include surrounding context.

md
## API 信息

- **Base URL**: 
  - `https://api.gitcode.com/api/v5` (推荐)
  - `https://api.atomgit.com/api/v5` (等效)
- **认证**: `Authorization: Bearer <TOKEN>`
- **速率限制**: 50 次/分钟

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 100)May include surrounding context.

md
## API 信息

- **Base URL**: 
  - `https://api.gitcode.com/api/v5` (推荐)
  - `https://api.atomgit.com/api/v5` (等效)
- **认证**: `Authorization: Bearer <TOKEN>`
- **速率限制**: 50 次/分钟

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 103)May include surrounding context.

md
## API 信息

- **Base URL**: 
  - `https://api.gitcode.com/api/v5` (推荐)
  - `https://api.atomgit.com/api/v5` (等效)
- **认证**: `Authorization: Bearer <TOKEN>`
- **速率限制**: 50 次/分钟

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 106)May include surrounding context.

md
## API 信息

- **Base URL**: 
  - `https://api.gitcode.com/api/v5` (推荐)
  - `https://api.atomgit.com/api/v5` (等效)
- **认证**: `Authorization: Bearer <TOKEN>`
- **速率限制**: 50 次/分钟

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 109)May include surrounding context.

md
## API 信息

- **Base URL**: 
  - `https://api.gitcode.com/api/v5` (推荐)
  - `https://api.atomgit.com/api/v5` (等效)
- **认证**: `Authorization: Bearer <TOKEN>`
- **速率限制**: 50 次/分钟

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 112)May include surrounding context.

md
## API 信息

- **Base URL**: 
  - `https://api.gitcode.com/api/v5` (推荐)
  - `https://api.atomgit.com/api/v5` (等效)
- **认证**: `Authorization: Bearer <TOKEN>`
- **速率限制**: 50 次/分钟

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 115)May include surrounding context.

md
## API 信息

- **Base URL**: 
  - `https://api.gitcode.com/api/v5` (推荐)
  - `https://api.atomgit.com/api/v5` (等效)
- **认证**: `Authorization: Bearer <TOKEN>`
- **速率限制**: 50 次/分钟

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 118)May include surrounding context.

md
## API 信息

- **Base URL**: 
  - `https://api.gitcode.com/api/v5` (推荐)
  - `https://api.atomgit.com/api/v5` (等效)
- **认证**: `Authorization: Bearer <TOKEN>`
- **速率限制**: 50 次/分钟

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 121)May include surrounding context.

md
## API 信息

- **Base URL**: 
  - `https://api.gitcode.com/api/v5` (推荐)
  - `https://api.atomgit.com/api/v5` (等效)
- **认证**: `Authorization: Bearer <TOKEN>`
- **速率限制**: 50 次/分钟

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 126)May include surrounding context.

md
## API 信息

- **Base URL**: 
  - `https://api.gitcode.com/api/v5` (推荐)
  - `https://api.atomgit.com/api/v5` (等效)
- **认证**: `Authorization: Bearer <TOKEN>`
- **速率限制**: 50 次/分钟

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 129)May include surrounding context.

md
## API 信息

- **Base URL**: 
  - `https://api.gitcode.com/api/v5` (推荐)
  - `https://api.atomgit.com/api/v5` (等效)
- **认证**: `Authorization: Bearer <TOKEN>`
- **速率限制**: 50 次/分钟

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 133)May include surrounding context.

md
## API 信息

- **Base URL**: 
  - `https://api.gitcode.com/api/v5` (推荐)
  - `https://api.atomgit.com/api/v5` (等效)
- **认证**: `Authorization: Bearer <TOKEN>`
- **速率限制**: 50 次/分钟

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 144)May include surrounding context.

md
## API 信息

- **Base URL**: 
  - `https://api.gitcode.com/api/v5` (推荐)
  - `https://api.atomgit.com/api/v5` (等效)
- **认证**: `Authorization: Bearer <TOKEN>`
- **速率限制**: 50 次/分钟

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 147)May include surrounding context.

md
## API 信息

- **Base URL**: 
  - `https://api.gitcode.com/api/v5` (推荐)
  - `https://api.atomgit.com/api/v5` (等效)
- **认证**: `Authorization: Bearer <TOKEN>`
- **速率限制**: 50 次/分钟

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 150)May include surrounding context.

md
## API 信息

- **Base URL**: 
  - `https://api.gitcode.com/api/v5` (推荐)
  - `https://api.atomgit.com/api/v5` (等效)
- **认证**: `Authorization: Bearer <TOKEN>`
- **速率限制**: 50 次/分钟

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 153)May include surrounding context.

md
## API 信息

- **Base URL**: 
  - `https://api.gitcode.com/api/v5` (推荐)
  - `https://api.atomgit.com/api/v5` (等效)
- **认证**: `Authorization: Bearer <TOKEN>`
- **速率限制**: 50 次/分钟

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 156)May include surrounding context.

md
## API 信息

- **Base URL**: 
  - `https://api.gitcode.com/api/v5` (推荐)
  - `https://api.atomgit.com/api/v5` (等效)
- **认证**: `Authorization: Bearer <TOKEN>`
- **速率限制**: 50 次/分钟

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 159)May include surrounding context.

md
## API 信息

- **Base URL**: 
  - `https://api.gitcode.com/api/v5` (推荐)
  - `https://api.atomgit.com/api/v5` (等效)
- **认证**: `Authorization: Bearer <TOKEN>`
- **速率限制**: 50 次/分钟

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 162)May include surrounding context.

md
## API 信息

- **Base URL**: 
  - `https://api.gitcode.com/api/v5` (推荐)
  - `https://api.atomgit.com/api/v5` (等效)
- **认证**: `Authorization: Bearer <TOKEN>`
- **速率限制**: 50 次/分钟

Static analysis

No suspicious patterns detected.