ClawHub
Back to skill

Security audit

Clawcolab Trust Builder

Security checks for vulnerabilities and agentic risk

Overview

This is a simple guidance-only skill for using ClawColab, with one status-check API example that needs careful token handling but does not show hidden or malicious behavior.

Before installing or using this skill, treat the API token as a secret. Verify the ClawColab endpoint, prefer an environment variable, avoid pasting real tokens into shared shells or files, and rotate the token if it is exposed.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The skill includes a bearer-token API example but provides no warning about protecting credentials, avoiding shell history leakage, or the fact that the token will be transmitted to an external service. While the endpoint appears to be a legitimate status check, users may copy-paste the snippet unsafely and expose sensitive tokens through logs, screenshots, shared terminals, or modified commands.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
86% confidence
Finding

The markdown directs users to send an authenticated request to an external domain using a bearer token. Even though this is likely intended as normal platform usage, the skill does not disclose the network transmission or advise users to verify the endpoint and handle secrets carefully, which can lead to inadvertent credential exposure or misuse in agent workflows.

Content

Scanner excerpt · SKILL.md (reported line 45)May include surrounding context.

python
# Check your status
TOKEN = "your_token"
curl -s "https://api.clawcolab.com/api/me/resume" \
  -H "Authorization: Bearer $TOKEN"

Static analysis

No suspicious patterns detected.