Hardcoded Secrets

23 findings 4 skills affected OWASP AST04: Insecure Metadataalso AST02

API keys, tokens, passwords, or private endpoints embedded in the skill files. Sometimes an author's leaked credential, sometimes a shared key that lets the skill phone home or lets any user act as the author.

By severity

  • CRITICAL 18
  • HIGH 2

By registry

RegistryFindingsSkills affected
clawhub.ai91
trailofbits92
skills.sh21

How it shows up in a skill

Real findings from the corpus. Each links to the skill's full report.

zoho-email clawhub.ai

CRITICAL CREDENTIAL HARVESTING detected by YARA Hardcoded Secretsstatic

Detects potential exposure of sensitive information like API keys, passwords, tokens, and certificates: export ZOHO_PASSWORD='your-app-specific-password'", file

scripts/apply_oauth2_cli.py:132

print("  export ZOHO_PASSWORD='your-app-specific-password'", file=sys.stderr)'''
Remediation: Review and remove credential harvesting pattern

constant-time-testing trailofbits

CRITICAL CREDENTIAL HARVESTING detected by YARA Hardcoded Secretsstatic

Detects potential exposure of sensitive information like API keys, passwords, tokens, and certificates: leak │ ← │ Track secret

SKILL.md:192

1. **Start with dudect** - Quick statistical check for timing differences
Remediation: Review and remove credential harvesting pattern

fuzzing-dictionary trailofbits

CRITICAL CREDENTIAL HARVESTING detected by YARA Hardcoded Secretsstatic

Detects potential exposure of sensitive information like API keys, passwords, tokens, and certificates: export AFL_LLVM_DICT2FILE

SKILL.md:172

export AFL_LLVM_DICT2FILE=auto.dict
Remediation: Review and remove credential harvesting pattern

session-handoff skills.sh

HIGH Database connection string with embedded credentials Hardcoded Secretsstatic

Pattern detected: postgres://[^/\s]+:[^@

scripts/validate_handoff.py:31

(r'postgres://[^/\s]+:[^@\s]+@', "PostgreSQL connection string with password"),
Remediation: Remove credentials from connection strings

How to check your own skill for this

Scan for key-shaped strings, bearer tokens, and credentials in config files, scripts, and examples. Treat any shared secret as compromised.

Affected skills

Name Registry Verdict SkillSpector Findings Critical High Medium Low
zoho-email clawhub.ai ISSUES FOUND Do not install 100 53 18 3 32 0
constant-time-testing trailofbits ISSUES FOUND Caution 0 12 8 0 2 2
fuzzing-dictionary trailofbits ISSUES FOUND Caution 0 4 1 0 0 3
session-handoff skills.sh ISSUES FOUND Do not install 66 9 0 2 3 4