ClawHub
Back to skill

Security audit

PageAudit

Security checks for vulnerabilities and agentic risk

Overview

This skill transparently uses PageAudit to audit web page SEO, but users should avoid submitting private or secret-bearing URLs.

Install only if you are comfortable sending audited page URLs, and the fetched public HTML, to PageAudit. Do not submit internal sites, private preview links, or URLs with sensitive query parameters unless you accept that disclosure and understand the service's terms and privacy policy.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

External Transmission

Medium
Category
Data Exfiltration
Confidence
95% confidence
Finding

The skill instructs the agent to send user-supplied URLs to an external third-party service (pageaudit.online) for processing. Even though this is the core purpose of the skill, it is still an external data transmission risk because URLs may embed sensitive query strings, preview links, internal hostnames, or other confidential deployment details that would be disclosed off-platform.

Content

Scanner excerpt · SKILL.md (reported line 58)May include surrounding context.

bash
# One audit, no token
curl -s -XPOST https://pageaudit.online/api/audit -H 'content-type: application/json' \
  -d '{"url":"https://example.com/"}'

# Preview against production, same guest token

External Transmission

Medium
Category
Data Exfiltration
Confidence
97% confidence
Finding

This example transmits both a target URL and a guest_token to the external service, tying multiple audits to the same remote identity. While intended for feature use, this creates privacy and tracking risk and could expose sensitive preview/deployment URLs and historical audit linkage to the third party if used on non-public assets.

Content

Scanner excerpt · SKILL.md (reported line 63)May include surrounding context.

md
# Preview against production, same guest token
PA=$(curl -s -XPOST https://pageaudit.online/api/guest | jq -r .token)
PROD=$(curl -s -XPOST https://pageaudit.online/api/audit -H 'content-type: application/json' \
  -d "{\"url\":\"https://example.com/\",\"guest_token\":\"$PA\"}" | jq -r .id)
curl -s -XPOST https://pageaudit.online/api/audit -H 'content-type: application/json' \
  -d "{\"url\":\"https://preview.example.com/\",\"guest_token\":\"$PA\",\"compare_with\":\"$PROD\"}" | jq .comparison

External Transmission

Medium
Category
Data Exfiltration
Confidence
97% confidence
Finding

The preview-vs-production comparison example sends a preview URL, guest token, and prior audit reference to the external service. In context, this is more sensitive than a normal public-page audit because preview deployments often reveal unreleased content, internal branches, or access patterns, increasing confidentiality and metadata exposure risk.

Content

Scanner excerpt · SKILL.md (reported line 65)May include surrounding context.

PA=$(curl -s -XPOST https://pageaudit.online/api/guest | jq -r .token) PROD=$(curl -s -XPOST https://pageaudit.online/api/audit -H 'content-type: application/json'
-d "{"url":"https://example.com/\",\"guest_token\":\"$PA\"}" | jq -r .id) curl -s -XPOST https://pageaudit.online/api/audit -H 'content-type: application/json'
-d "{"url":"https://preview.example.com/\",\"guest_token\":\"$PA\",\"compare_with\":\"$PROD\"}" | jq .comparison

text

Static analysis

No suspicious patterns detected.