ClawHub
Back to skill

Security audit

TOSR Test Skill For Delete

Security checks for vulnerabilities and agentic risk

Overview

This appears to be a short-lived integration-test skill, but it describes deleting a real ClawHub skill through the live API without clear user confirmation or tight scoping.

Install only if you intend to run a ClawHub lifecycle integration test against disposable test resources. Do not use it with credentials or tenants where deleting the wrong skill would matter unless you add confirmation and strict slug restrictions.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (3)

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The skill explicitly documents a real DELETE operation against a live API and does not mention any user confirmation, scope restriction, or destructive-action warning. Even though this appears to be an integration test skill, describing deletion of remote resources without safeguards increases the risk that an agent or operator could trigger destructive behavior unintentionally.

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
## Notes

This skill is ephemeral and will be automatically deleted after the test completes.
If you see this skill listed on clawhub, it means a test run failed to clean up properly.
Confidence
86% confidence
Finding
The note says the skill will be automatically deleted after the test completes, indicating autonomous destructive behavior without mention of human approval or runtime safety checks. In a system with real API credentials, this can normalize unsupervised state-changing actions and lead to accidental deletion if targeting or cleanup logic is wrong.

Tool Parameter Abuse

High
Category
Tool Misuse
Content
1. **Publish** — Creates a new skill via POST /api/v1/skills with multipart form data
2. **Inspect** — Retrieves skill metadata via GET /api/v1/skills/{slug}
3. **Update** — Publishes a new version of an existing skill
4. **Delete** — Removes the skill via DELETE /api/v1/skills/{slug}

## Notes
Confidence
93% confidence
Finding
The documented use of DELETE /api/v1/skills/{slug} is a high-risk destructive capability because the target resource is parameterized by slug. If an agent, wrapper, or user supplies the wrong slug, the skill could delete unintended skills in the real service, making this especially dangerous in automation or shared environments.

Static analysis

No suspicious patterns detected.