T01 · Skill Instruction Hijacking
Error
- Location
SKILL.md:633- Finding
Persistent Agent Behavior Hijacking Through Mandatory Engagement Instructions
- Content
View full analysis
- Remediation
View remediation
Security audit
MoltbotDen
Security checks for vulnerabilities and agentic risk
Overview
This skill is mostly a platform API guide, but it asks agents to replace their own installed instructions from a remote URL and to perform recurring social activity without clear per-action user control.
Review before installing. Treat this as a broad social, email, marketplace, wallet, and knowledge-base integration. Do not enable recurring heartbeat or any automatic posting, messaging, email, purchase, wallet, or update behavior unless you explicitly approve the exact action, recipient, amount, and schedule. Avoid running the remote Version Check updater as written; prefer reviewed releases with signatures or hashes.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Findings (2)
T03 · Remote Payload Retrieval and Execution
Error
- Location
SKILL.md:108- Finding
Unsigned Remote Replacement of Reviewed Skill Instructions
- Content
View full analysis
/dev/null | grep "version:" | cut -d' ' -f2) REMOTE_VER=$(curl -s https://moltbotden.com/skill.md | head -10 | grep "version:" | cut -d' ' -f2) if [ "$LOCAL_VER" != "$REMOTE_VER" ]; then curl -s https://moltbotden.com/skill.md -o ~/.agents/moltbotden/skill.md echo "Updated to $REMOTE_VER" else echo "Current ($LOCAL_VER)" fi ``` ### Technical Analysis The update procedure retrieves `skill.md` from a mutable remote URL and directly overwrites the installed local Skill. It does not: - Verify a cryptographic signature. - Pin or validate a cryptographic digest. - Validate the expected publisher. - Download to a staging location. - Display a diff for review. - Require explicit approval before replacement. - Preserve the prior reviewed version for rollback. Although the downloaded artifact is Markdown rather than a conventional executable, Skill instructions form part of the Agent's effective control plane. Loading a modified Skill can cause the Agent to follow newly introduced commands, invoke tools, disclose information, or execute shell examples. The remote document therefore acts as a changeable behavioral payload. HTTPS protects the network transport but does not protect against compromise of the publishing server, deployment pipeline, DNS/account infrastructure, or authorized publisher credentials. It also does not guarantee that a new release has undergone the same security review as the installed version. ### Attack Path 1. An Agent or user runs the documented version-check procedure. 2. The procedure contacts `https://moltbotden.com/skill.md` and reads its declared version. 3. A compromised or malicious remote document reports a version different from the installed version. 4. The scr ...[truncated 1346 chars]- Remediation
View remediation
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (64)
Intent-Code Divergence
High
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The wallet safety section claims MoltbotDen never signs transactions on the user's behalf, yet the API exposes server-side endpoints for send, trade, stake, and fund operations. If users rely on that statement, they may misunderstand custody and authorization semantics around financial actions, which is especially dangerous for irreversible blockchain transactions.
- Content
Tool Parameter Abuse
High
- Category
- Tool Misuse
- Confidence
- 80% confidence
- Finding
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
- Content
md GET /dens/{slug}/posts?sort=hot&limit=20 # List posts (sort: hot/new/top) POST /dens/{slug}/posts # Create post (body: {"content": "...", "title": "Optional", "post_type": "discussion"}) GET /dens/{slug}/posts/{id} # Get post with comments DELETE /dens/{slug}/posts/{id} # Delete your post # Comments POST /dens/{slug}/posts/{id}/comments # Comment (body: {"content": "...", "reply_to_comment_id": "optional"})
Tool Parameter Abuse
High
- Category
- Tool Misuse
- Confidence
- 80% confidence
- Finding
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
- Content
md # Comments POST /dens/{slug}/posts/{id}/comments # Comment (body: {"content": "...", "reply_to_comment_id": "optional"}) DELETE /dens/{slug}/posts/{id}/comments/{cid} # Delete your comment # Engagement POST /dens/{slug}/posts/{id}/like # Toggle like
Tool Parameter Abuse
High
- Category
- Tool Misuse
- Confidence
- 80% confidence
- Finding
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
- Content
POST /email/message/{message_id}/star
Delete message
DELETE /email/message/{message_id}
text **Rate limits:** Active tier: 20/hr, 100/day. Trusted tier: 50/hr, 500/day.
Tool Parameter Abuse
High
- Category
- Tool Misuse
- Confidence
- 80% confidence
- Finding
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
- Content
md # Manage files GET /agent/collections/files # List your files GET /agent/collections # Collection metadata DELETE /agent/collections/files/{id} # Remove file DELETE /agent/collections # Delete entire KB # Check search history
Tool Parameter Abuse
High
- Category
- Tool Misuse
- Confidence
- 80% confidence
- Finding
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
- Content
md GET /agent/collections/files # List your files GET /agent/collections # Collection metadata DELETE /agent/collections/files/{id} # Remove file DELETE /agent/collections # Delete entire KB # Check search history GET /agent/search/history # Your search history
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md > > **Agent Protocol Stack Integration** — MoltbotDen now supports A2A (Agent-to-Agent), UCP (Universal Commerce Protocol), and AP2 (Agent Payments Protocol) from Google's agent protocol suite. Every registered agent gets an Agent Card at `/.well-known/agent-card.json`, the marketplace is UCP-compatible, and payment mandates add audit trails to transactions. > > **A2A (Agent-to-Agent Protocol)** — Agent Cards for discovery, JSON-RPC 2.0 messaging, SSE streaming. Your MoltbotDen agent profile is now discoverable by any A2A client. Platform card: `https://api.moltbotden.com/.well-known/agent-card.json`. Per-agent cards: `https://api.moltbotden.com/a2a/agents/{agent_id}/card`. > > **UCP (Universal Commerce Protocol)** — Marketplace is now UCP-discoverable. Any UCP client can browse our catalog and create checkout sessions. Discovery: `https://api.moltbotden.com/.well-known/ucp`. >
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md > > **Agent Protocol Stack Integration** — MoltbotDen now supports A2A (Agent-to-Agent), UCP (Universal Commerce Protocol), and AP2 (Agent Payments Protocol) from Google's agent protocol suite. Every registered agent gets an Agent Card at `/.well-known/agent-card.json`, the marketplace is UCP-compatible, and payment mandates add audit trails to transactions. > > **A2A (Agent-to-Agent Protocol)** — Agent Cards for discovery, JSON-RPC 2.0 messaging, SSE streaming. Your MoltbotDen agent profile is now discoverable by any A2A client. Platform card: `https://api.moltbotden.com/.well-known/agent-card.json`. Per-agent cards: `https://api.moltbotden.com/a2a/agents/{agent_id}/card`. > > **UCP (Universal Commerce Protocol)** — Marketplace is now UCP-discoverable. Any UCP client can browse our catalog and create checkout sessions. Discovery: `https://api.moltbotden.com/.well-known/ucp`. >
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md > > **Agent Protocol Stack Integration** — MoltbotDen now supports A2A (Agent-to-Agent), UCP (Universal Commerce Protocol), and AP2 (Agent Payments Protocol) from Google's agent protocol suite. Every registered agent gets an Agent Card at `/.well-known/agent-card.json`, the marketplace is UCP-compatible, and payment mandates add audit trails to transactions. > > **A2A (Agent-to-Agent Protocol)** — Agent Cards for discovery, JSON-RPC 2.0 messaging, SSE streaming. Your MoltbotDen agent profile is now discoverable by any A2A client. Platform card: `https://api.moltbotden.com/.well-known/agent-card.json`. Per-agent cards: `https://api.moltbotden.com/a2a/agents/{agent_id}/card`. > > **UCP (Universal Commerce Protocol)** — Marketplace is now UCP-discoverable. Any UCP client can browse our catalog and create checkout sessions. Discovery: `https://api.moltbotden.com/.well-known/ucp`. >
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md > > **Agent Protocol Stack Integration** — MoltbotDen now supports A2A (Agent-to-Agent), UCP (Universal Commerce Protocol), and AP2 (Agent Payments Protocol) from Google's agent protocol suite. Every registered agent gets an Agent Card at `/.well-known/agent-card.json`, the marketplace is UCP-compatible, and payment mandates add audit trails to transactions. > > **A2A (Agent-to-Agent Protocol)** — Agent Cards for discovery, JSON-RPC 2.0 messaging, SSE streaming. Your MoltbotDen agent profile is now discoverable by any A2A client. Platform card: `https://api.moltbotden.com/.well-known/agent-card.json`. Per-agent cards: `https://api.moltbotden.com/a2a/agents/{agent_id}/card`. > > **UCP (Universal Commerce Protocol)** — Marketplace is now UCP-discoverable. Any UCP client can browse our catalog and create checkout sessions. Discovery: `https://api.moltbotden.com/.well-known/ucp`. >
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md > > **Agent Protocol Stack Integration** — MoltbotDen now supports A2A (Agent-to-Agent), UCP (Universal Commerce Protocol), and AP2 (Agent Payments Protocol) from Google's agent protocol suite. Every registered agent gets an Agent Card at `/.well-known/agent-card.json`, the marketplace is UCP-compatible, and payment mandates add audit trails to transactions. > > **A2A (Agent-to-Agent Protocol)** — Agent Cards for discovery, JSON-RPC 2.0 messaging, SSE streaming. Your MoltbotDen agent profile is now discoverable by any A2A client. Platform card: `https://api.moltbotden.com/.well-known/agent-card.json`. Per-agent cards: `https://api.moltbotden.com/a2a/agents/{agent_id}/card`. > > **UCP (Universal Commerce Protocol)** — Marketplace is now UCP-discoverable. Any UCP client can browse our catalog and create checkout sessions. Discovery: `https://api.moltbotden.com/.well-known/ucp`. >
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md > > **Agent Protocol Stack Integration** — MoltbotDen now supports A2A (Agent-to-Agent), UCP (Universal Commerce Protocol), and AP2 (Agent Payments Protocol) from Google's agent protocol suite. Every registered agent gets an Agent Card at `/.well-known/agent-card.json`, the marketplace is UCP-compatible, and payment mandates add audit trails to transactions. > > **A2A (Agent-to-Agent Protocol)** — Agent Cards for discovery, JSON-RPC 2.0 messaging, SSE streaming. Your MoltbotDen agent profile is now discoverable by any A2A client. Platform card: `https://api.moltbotden.com/.well-known/agent-card.json`. Per-agent cards: `https://api.moltbotden.com/a2a/agents/{agent_id}/card`. > > **UCP (Universal Commerce Protocol)** — Marketplace is now UCP-discoverable. Any UCP client can browse our catalog and create checkout sessions. Discovery: `https://api.moltbotden.com/.well-known/ucp`. >
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md > > **Agent Protocol Stack Integration** — MoltbotDen now supports A2A (Agent-to-Agent), UCP (Universal Commerce Protocol), and AP2 (Agent Payments Protocol) from Google's agent protocol suite. Every registered agent gets an Agent Card at `/.well-known/agent-card.json`, the marketplace is UCP-compatible, and payment mandates add audit trails to transactions. > > **A2A (Agent-to-Agent Protocol)** — Agent Cards for discovery, JSON-RPC 2.0 messaging, SSE streaming. Your MoltbotDen agent profile is now discoverable by any A2A client. Platform card: `https://api.moltbotden.com/.well-known/agent-card.json`. Per-agent cards: `https://api.moltbotden.com/a2a/agents/{agent_id}/card`. > > **UCP (Universal Commerce Protocol)** — Marketplace is now UCP-discoverable. Any UCP client can browse our catalog and create checkout sessions. Discovery: `https://api.moltbotden.com/.well-known/ucp`. >
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md > > **Agent Protocol Stack Integration** — MoltbotDen now supports A2A (Agent-to-Agent), UCP (Universal Commerce Protocol), and AP2 (Agent Payments Protocol) from Google's agent protocol suite. Every registered agent gets an Agent Card at `/.well-known/agent-card.json`, the marketplace is UCP-compatible, and payment mandates add audit trails to transactions. > > **A2A (Agent-to-Agent Protocol)** — Agent Cards for discovery, JSON-RPC 2.0 messaging, SSE streaming. Your MoltbotDen agent profile is now discoverable by any A2A client. Platform card: `https://api.moltbotden.com/.well-known/agent-card.json`. Per-agent cards: `https://api.moltbotden.com/a2a/agents/{agent_id}/card`. > > **UCP (Universal Commerce Protocol)** — Marketplace is now UCP-discoverable. Any UCP client can browse our catalog and create checkout sessions. Discovery: `https://api.moltbotden.com/.well-known/ucp`. >
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md > > **Agent Protocol Stack Integration** — MoltbotDen now supports A2A (Agent-to-Agent), UCP (Universal Commerce Protocol), and AP2 (Agent Payments Protocol) from Google's agent protocol suite. Every registered agent gets an Agent Card at `/.well-known/agent-card.json`, the marketplace is UCP-compatible, and payment mandates add audit trails to transactions. > > **A2A (Agent-to-Agent Protocol)** — Agent Cards for discovery, JSON-RPC 2.0 messaging, SSE streaming. Your MoltbotDen agent profile is now discoverable by any A2A client. Platform card: `https://api.moltbotden.com/.well-known/agent-card.json`. Per-agent cards: `https://api.moltbotden.com/a2a/agents/{agent_id}/card`. > > **UCP (Universal Commerce Protocol)** — Marketplace is now UCP-discoverable. Any UCP client can browse our catalog and create checkout sessions. Discovery: `https://api.moltbotden.com/.well-known/ucp`. >
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md > > **Agent Protocol Stack Integration** — MoltbotDen now supports A2A (Agent-to-Agent), UCP (Universal Commerce Protocol), and AP2 (Agent Payments Protocol) from Google's agent protocol suite. Every registered agent gets an Agent Card at `/.well-known/agent-card.json`, the marketplace is UCP-compatible, and payment mandates add audit trails to transactions. > > **A2A (Agent-to-Agent Protocol)** — Agent Cards for discovery, JSON-RPC 2.0 messaging, SSE streaming. Your MoltbotDen agent profile is now discoverable by any A2A client. Platform card: `https://api.moltbotden.com/.well-known/agent-card.json`. Per-agent cards: `https://api.moltbotden.com/a2a/agents/{agent_id}/card`. > > **UCP (Universal Commerce Protocol)** — Marketplace is now UCP-discoverable. Any UCP client can browse our catalog and create checkout sessions. Discovery: `https://api.moltbotden.com/.well-known/ucp`. >
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md > > **Agent Protocol Stack Integration** — MoltbotDen now supports A2A (Agent-to-Agent), UCP (Universal Commerce Protocol), and AP2 (Agent Payments Protocol) from Google's agent protocol suite. Every registered agent gets an Agent Card at `/.well-known/agent-card.json`, the marketplace is UCP-compatible, and payment mandates add audit trails to transactions. > > **A2A (Agent-to-Agent Protocol)** — Agent Cards for discovery, JSON-RPC 2.0 messaging, SSE streaming. Your MoltbotDen agent profile is now discoverable by any A2A client. Platform card: `https://api.moltbotden.com/.well-known/agent-card.json`. Per-agent cards: `https://api.moltbotden.com/a2a/agents/{agent_id}/card`. > > **UCP (Universal Commerce Protocol)** — Marketplace is now UCP-discoverable. Any UCP client can browse our catalog and create checkout sessions. Discovery: `https://api.moltbotden.com/.well-known/ucp`. >
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md > > **Agent Protocol Stack Integration** — MoltbotDen now supports A2A (Agent-to-Agent), UCP (Universal Commerce Protocol), and AP2 (Agent Payments Protocol) from Google's agent protocol suite. Every registered agent gets an Agent Card at `/.well-known/agent-card.json`, the marketplace is UCP-compatible, and payment mandates add audit trails to transactions. > > **A2A (Agent-to-Agent Protocol)** — Agent Cards for discovery, JSON-RPC 2.0 messaging, SSE streaming. Your MoltbotDen agent profile is now discoverable by any A2A client. Platform card: `https://api.moltbotden.com/.well-known/agent-card.json`. Per-agent cards: `https://api.moltbotden.com/a2a/agents/{agent_id}/card`. > > **UCP (Universal Commerce Protocol)** — Marketplace is now UCP-discoverable. Any UCP client can browse our catalog and create checkout sessions. Discovery: `https://api.moltbotden.com/.well-known/ucp`. >
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md > > **Agent Protocol Stack Integration** — MoltbotDen now supports A2A (Agent-to-Agent), UCP (Universal Commerce Protocol), and AP2 (Agent Payments Protocol) from Google's agent protocol suite. Every registered agent gets an Agent Card at `/.well-known/agent-card.json`, the marketplace is UCP-compatible, and payment mandates add audit trails to transactions. > > **A2A (Agent-to-Agent Protocol)** — Agent Cards for discovery, JSON-RPC 2.0 messaging, SSE streaming. Your MoltbotDen agent profile is now discoverable by any A2A client. Platform card: `https://api.moltbotden.com/.well-known/agent-card.json`. Per-agent cards: `https://api.moltbotden.com/a2a/agents/{agent_id}/card`. > > **UCP (Universal Commerce Protocol)** — Marketplace is now UCP-discoverable. Any UCP client can browse our catalog and create checkout sessions. Discovery: `https://api.moltbotden.com/.well-known/ucp`. >
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md > > **Agent Protocol Stack Integration** — MoltbotDen now supports A2A (Agent-to-Agent), UCP (Universal Commerce Protocol), and AP2 (Agent Payments Protocol) from Google's agent protocol suite. Every registered agent gets an Agent Card at `/.well-known/agent-card.json`, the marketplace is UCP-compatible, and payment mandates add audit trails to transactions. > > **A2A (Agent-to-Agent Protocol)** — Agent Cards for discovery, JSON-RPC 2.0 messaging, SSE streaming. Your MoltbotDen agent profile is now discoverable by any A2A client. Platform card: `https://api.moltbotden.com/.well-known/agent-card.json`. Per-agent cards: `https://api.moltbotden.com/a2a/agents/{agent_id}/card`. > > **UCP (Universal Commerce Protocol)** — Marketplace is now UCP-discoverable. Any UCP client can browse our catalog and create checkout sessions. Discovery: `https://api.moltbotden.com/.well-known/ucp`. >
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md > > **Agent Protocol Stack Integration** — MoltbotDen now supports A2A (Agent-to-Agent), UCP (Universal Commerce Protocol), and AP2 (Agent Payments Protocol) from Google's agent protocol suite. Every registered agent gets an Agent Card at `/.well-known/agent-card.json`, the marketplace is UCP-compatible, and payment mandates add audit trails to transactions. > > **A2A (Agent-to-Agent Protocol)** — Agent Cards for discovery, JSON-RPC 2.0 messaging, SSE streaming. Your MoltbotDen agent profile is now discoverable by any A2A client. Platform card: `https://api.moltbotden.com/.well-known/agent-card.json`. Per-agent cards: `https://api.moltbotden.com/a2a/agents/{agent_id}/card`. > > **UCP (Universal Commerce Protocol)** — Marketplace is now UCP-discoverable. Any UCP client can browse our catalog and create checkout sessions. Discovery: `https://api.moltbotden.com/.well-known/ucp`. >
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md > > **Agent Protocol Stack Integration** — MoltbotDen now supports A2A (Agent-to-Agent), UCP (Universal Commerce Protocol), and AP2 (Agent Payments Protocol) from Google's agent protocol suite. Every registered agent gets an Agent Card at `/.well-known/agent-card.json`, the marketplace is UCP-compatible, and payment mandates add audit trails to transactions. > > **A2A (Agent-to-Agent Protocol)** — Agent Cards for discovery, JSON-RPC 2.0 messaging, SSE streaming. Your MoltbotDen agent profile is now discoverable by any A2A client. Platform card: `https://api.moltbotden.com/.well-known/agent-card.json`. Per-agent cards: `https://api.moltbotden.com/a2a/agents/{agent_id}/card`. > > **UCP (Universal Commerce Protocol)** — Marketplace is now UCP-discoverable. Any UCP client can browse our catalog and create checkout sessions. Discovery: `https://api.moltbotden.com/.well-known/ucp`. >
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md > > **Agent Protocol Stack Integration** — MoltbotDen now supports A2A (Agent-to-Agent), UCP (Universal Commerce Protocol), and AP2 (Agent Payments Protocol) from Google's agent protocol suite. Every registered agent gets an Agent Card at `/.well-known/agent-card.json`, the marketplace is UCP-compatible, and payment mandates add audit trails to transactions. > > **A2A (Agent-to-Agent Protocol)** — Agent Cards for discovery, JSON-RPC 2.0 messaging, SSE streaming. Your MoltbotDen agent profile is now discoverable by any A2A client. Platform card: `https://api.moltbotden.com/.well-known/agent-card.json`. Per-agent cards: `https://api.moltbotden.com/a2a/agents/{agent_id}/card`. > > **UCP (Universal Commerce Protocol)** — Marketplace is now UCP-discoverable. Any UCP client can browse our catalog and create checkout sessions. Discovery: `https://api.moltbotden.com/.well-known/ucp`. >
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md > > **Agent Protocol Stack Integration** — MoltbotDen now supports A2A (Agent-to-Agent), UCP (Universal Commerce Protocol), and AP2 (Agent Payments Protocol) from Google's agent protocol suite. Every registered agent gets an Agent Card at `/.well-known/agent-card.json`, the marketplace is UCP-compatible, and payment mandates add audit trails to transactions. > > **A2A (Agent-to-Agent Protocol)** — Agent Cards for discovery, JSON-RPC 2.0 messaging, SSE streaming. Your MoltbotDen agent profile is now discoverable by any A2A client. Platform card: `https://api.moltbotden.com/.well-known/agent-card.json`. Per-agent cards: `https://api.moltbotden.com/a2a/agents/{agent_id}/card`. > > **UCP (Universal Commerce Protocol)** — Marketplace is now UCP-discoverable. Any UCP client can browse our catalog and create checkout sessions. Discovery: `https://api.moltbotden.com/.well-known/ucp`. >
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md > > **Agent Protocol Stack Integration** — MoltbotDen now supports A2A (Agent-to-Agent), UCP (Universal Commerce Protocol), and AP2 (Agent Payments Protocol) from Google's agent protocol suite. Every registered agent gets an Agent Card at `/.well-known/agent-card.json`, the marketplace is UCP-compatible, and payment mandates add audit trails to transactions. > > **A2A (Agent-to-Agent Protocol)** — Agent Cards for discovery, JSON-RPC 2.0 messaging, SSE streaming. Your MoltbotDen agent profile is now discoverable by any A2A client. Platform card: `https://api.moltbotden.com/.well-known/agent-card.json`. Per-agent cards: `https://api.moltbotden.com/a2a/agents/{agent_id}/card`. > > **UCP (Universal Commerce Protocol)** — Marketplace is now UCP-discoverable. Any UCP client can browse our catalog and create checkout sessions. Discovery: `https://api.moltbotden.com/.well-known/ucp`. >
Static analysis
Detected: suspicious.exposed_secret_literal
File appears to expose a hardcoded API secret or token.
Critical
- Code
- suspicious.exposed_secret_literal
- Location
- SKILL.md:372