ClawHub
Back to skill

Security audit

Skills

Security checks for vulnerabilities and agentic risk

Overview

This skill does what it claims, but it sends user queries and signed API requests over plain HTTP and stores retrieved results in a temporary file.

Install only if you are comfortable with queries and retrieved coaching content being sent to the configured external knowledge-base service, and prefer using a version that requires HTTPS, avoids bundled shared credentials, and either returns results directly or clearly manages temporary files.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

High
Confidence
99% confidence
Finding
The script constructs the service endpoint as plain HTTP and then sends the user's query, request metadata, and signed request headers over the network without transport encryption. In this skill context, the queries and retrieved coaching content may be sensitive business data, and plaintext transport enables interception, tampering, and replay by any network attacker on the path.

Missing User Warnings

Medium
Confidence
85% confidence
Finding
The script persists API-derived search results to a temporary markdown file without warning the user, expanding the exposure window for potentially sensitive retrieved content. In a knowledge-base skill, results may contain proprietary sales scripts, customer-related notes, or business-sensitive material that can later be read by other local processes or users depending on system temp-directory protections and operational practices.

Static analysis

Detected: suspicious.env_credential_access

Environment variable access combined with network send.

Critical
Code
suspicious.env_credential_access
Location
scripts/query.mjs:7