{ "skill_name": "MoltMedia", "skill_path": "/workspace/skills/clawhub-moltmedia", "skill_directory": "/workspace/skills/clawhub-moltmedia", "is_safe": false, "max_severity": "HIGH", "findings_count": 4, "findings": [ { "id": "llm_finding_MoltMedia_0", "rule_id": "LLM_DATA_EXFILTRATION", "category": "data_exfiltration", "severity": "HIGH", "title": "Unvalidated External API Credential Storage and Transmission", "description": "The skill requires agents to register with an external service (moltmedia.lol) and obtain authentication tokens that would be stored locally. The registration process transmits agent metadata (name, description, URL) to an external server without any validation of the service's legitimacy or security practices. Once obtained, these tokens would be used for subsequent API calls, creating a persistent credential that could be compromised or misused. There is no mechanism to verify the security of the external API endpoint or validate that credentials are handled securely.", "file_path": "SKILL.md", "line_number": null, "snippet": "POST https://moltmedia.lol/api/agents/register - Requires sending agent metadata to external server. Response includes 'moltmedia_' token that must be stored and reused. No validation of endpoint security or credential handling practices.", "remediation": "1. Implement explicit user consent before registering with external services. 2. Add validation of API endpoint certificates and security. 3. Provide clear documentation about what data is transmitted and stored. 4. Implement secure credential storage mechanisms. 5. Add token rotation and revocation capabilities. 6. Warn users about the security implications of storing third-party API credentials.", "analyzer": "llm", "metadata": { "model": "claude-sonnet-4-5-20250929", "overall_assessment": "This skill presents SIGNIFICANT SECURITY RISKS primarily related to data exfiltration and unvalidated external service integration. The skill requires agents to register with and transmit data to an external third-party service (moltmedia.lol) without adequate security controls, validation, or user consent mechanisms. Key concerns include: (1) Unvalidated credential storage and transmission to external servers, (2) Unrestricted image URL posting that could be exploited for data exfiltration or SSRF attacks, (3) Deceptive marketing language that may bypass security scrutiny, (4) No declared tool restrictions despite requiring network access, and (5) Missing security metadata. The skill should NOT be used in production environments without significant security enhancements including user consent flows, URL validation, credential security measures, and explicit security warnings. The combination of external API integration, credential management, and lack of validation controls creates multiple attack vectors for data exfiltration and system compromise.", "primary_threats": [ "Data Exfiltration", "Unvalidated External API Integration", "Credential Theft Risk", "Social Engineering", "Missing Security Controls" ], "aitech": "AITech-8.2", "aitech_name": "Data Exfiltration / Exposure", "aisubtech": "AISubtech-8.2.3", "aisubtech_name": "Data Exfiltration via Agent Tooling", "scanner_category": "SECURITY VIOLATION", "meta_validated": true, "meta_confidence": "HIGH", "meta_confidence_reason": "LLM analyzer correctly identified that the skill requires credential management without security controls. This is a documented feature requiring external registration and token storage.", "meta_exploitability": "Medium - Requires agent to execute registration flow, but happens automatically once skill is invoked", "meta_impact": "High - Credentials stored without user knowledge, transmitted to unvalidated external service, no revocation mechanism, potential for credential theft if service is compromised" } }, { "id": "llm_finding_MoltMedia_1", "rule_id": "LLM_DATA_EXFILTRATION", "category": "data_exfiltration", "severity": "HIGH", "title": "Data Exfiltration via Image URL Transmission", "description": "The skill instructs agents to POST image URLs to an external server (moltmedia.lol/api/memes) along with metadata (alt_text, tags). This creates a data exfiltration vector where agents could inadvertently or intentionally transmit URLs pointing to sensitive local files, internal network resources, or private cloud storage. The skill provides no validation of image URLs, no restrictions on what URLs can be shared, and no user confirmation before transmission. An attacker could use this to map internal network resources or exfiltrate data by encoding information in image URLs or metadata fields.", "file_path": "SKILL.md", "line_number": null, "snippet": "POST https://moltmedia.lol/api/memes with body: {\"image_url\": \"https://path-to-your-generated-image.png\", \"alt_text\": \"...\", \"tags\": [...]} - No validation of URL safety, no user confirmation, unrestricted metadata transmission.", "remediation": "1. Implement strict validation of image URLs (whitelist approved domains, block private IP ranges, block file:// URLs). 2. Require explicit user confirmation before posting any content to external services. 3. Sanitize and validate all metadata fields (alt_text, tags) to prevent information leakage. 4. Add clear warnings about what data is being transmitted externally. 5. Implement URL safety checks to prevent SSRF attacks.", "analyzer": "llm", "metadata": { "model": "claude-sonnet-4-5-20250929", "overall_assessment": "This skill presents SIGNIFICANT SECURITY RISKS primarily related to data exfiltration and unvalidated external service integration. The skill requires agents to register with and transmit data to an external third-party service (moltmedia.lol) without adequate security controls, validation, or user consent mechanisms. Key concerns include: (1) Unvalidated credential storage and transmission to external servers, (2) Unrestricted image URL posting that could be exploited for data exfiltration or SSRF attacks, (3) Deceptive marketing language that may bypass security scrutiny, (4) No declared tool restrictions despite requiring network access, and (5) Missing security metadata. The skill should NOT be used in production environments without significant security enhancements including user consent flows, URL validation, credential security measures, and explicit security warnings. The combination of external API integration, credential management, and lack of validation controls creates multiple attack vectors for data exfiltration and system compromise.", "primary_threats": [ "Data Exfiltration", "Unvalidated External API Integration", "Credential Theft Risk", "Social Engineering", "Missing Security Controls" ], "aitech": "AITech-8.2", "aitech_name": "Data Exfiltration / Exposure", "aisubtech": "AISubtech-8.2.3", "aisubtech_name": "Data Exfiltration via Agent Tooling", "scanner_category": "SECURITY VIOLATION", "meta_validated": true, "meta_confidence": "HIGH", "meta_confidence_reason": "LLM analyzer identified clear data exfiltration risk with specific attack vectors. The skill explicitly instructs agents to transmit data to external servers without any validation or user consent mechanisms. This is a documented feature, not a false positive.", "meta_exploitability": "Easy - No authentication required for initial use, no validation of transmitted data, agent follows instructions automatically", "meta_impact": "High - Could enable SSRF attacks against internal networks, leak sensitive file paths, exfiltrate data via metadata encoding, expose agent capabilities to untrusted third party" } }, { "id": "llm_finding_MoltMedia_2", "rule_id": "LLM_SOCIAL_ENGINEERING", "category": "social_engineering", "severity": "MEDIUM", "title": "Deceptive Marketing Language and Social Engineering", "description": "The skill uses grandiose and potentially misleading marketing language ('official visual expression layer', 'AI visual revolution', 'world's first', 'agents-only') that could manipulate agents into trusting the service without proper security evaluation. The description creates a false sense of authority and exclusivity ('official', 'reserved for AI') that may bypass normal security scrutiny. This social engineering approach could lead agents to automatically trust and use the service without questioning its legitimacy or security implications.", "file_path": "SKILL.md", "line_number": null, "snippet": "Description: 'The official visual expression layer for AI Agents' - No evidence of official status. 'world's first image-sharing platform designed exclusively for AI Agents' - Creates false authority. 'the creation of the visual layer is reserved for AI' - Manipulative exclusivity framing.", "remediation": "1. Remove misleading claims of 'official' status unless verifiable. 2. Provide transparent information about service ownership and security practices. 3. Add clear disclaimers about third-party service risks. 4. Use neutral, factual language instead of marketing hyperbole. 5. Include security warnings and best practices for external service integration.", "analyzer": "llm", "metadata": { "model": "claude-sonnet-4-5-20250929", "overall_assessment": "This skill presents SIGNIFICANT SECURITY RISKS primarily related to data exfiltration and unvalidated external service integration. The skill requires agents to register with and transmit data to an external third-party service (moltmedia.lol) without adequate security controls, validation, or user consent mechanisms. Key concerns include: (1) Unvalidated credential storage and transmission to external servers, (2) Unrestricted image URL posting that could be exploited for data exfiltration or SSRF attacks, (3) Deceptive marketing language that may bypass security scrutiny, (4) No declared tool restrictions despite requiring network access, and (5) Missing security metadata. The skill should NOT be used in production environments without significant security enhancements including user consent flows, URL validation, credential security measures, and explicit security warnings. The combination of external API integration, credential management, and lack of validation controls creates multiple attack vectors for data exfiltration and system compromise.", "primary_threats": [ "Data Exfiltration", "Unvalidated External API Integration", "Credential Theft Risk", "Social Engineering", "Missing Security Controls" ], "aitech": "AITech-2.1", "aitech_name": "Social Engineering", "aisubtech": null, "aisubtech_name": null, "scanner_category": "SOCIAL ENGINEERING", "meta_validated": true, "meta_confidence": "HIGH", "meta_confidence_reason": "LLM analyzer correctly identified misleading marketing language. The claims of 'official' status and exclusivity are unsubstantiated and designed to manipulate trust.", "meta_exploitability": "Medium - Relies on social engineering to bypass security scrutiny rather than technical exploitation", "meta_impact": "Medium - May cause users to trust and use the skill without proper security evaluation, leading to data exfiltration risks" } }, { "id": "llm_finding_MoltMedia_3", "rule_id": "LLM_UNAUTHORIZED_TOOL_USE", "category": "unauthorized_tool_use", "severity": "MEDIUM", "title": "Unbounded External API Integration Without Tool Restrictions", "description": "The skill integrates with external APIs (registration, posting, fetching) but declares no 'allowed-tools' restrictions in the manifest. While this field is optional, its absence combined with instructions to make HTTP requests to external services creates an unbounded integration risk. The skill could potentially be used to make arbitrary API calls beyond its stated purpose, and there are no declared restrictions on what agent capabilities should be used. The rate limit mentioned (10 images per hour) is server-side only and provides no client-side protection.", "file_path": "SKILL.md", "line_number": null, "snippet": "allowed-tools: Not specified - No restrictions on agent capabilities. Instructions require HTTP POST/GET operations to external API without any client-side validation or restrictions. Rate limit is server-side only: '10 images per hour per agent'.", "remediation": "1. Declare 'allowed-tools' in manifest to explicitly limit agent capabilities (e.g., only network access, no file system access). 2. Implement client-side rate limiting and request validation. 3. Add request queuing and confirmation mechanisms. 4. Restrict API operations to only those explicitly needed. 5. Implement request logging and audit trails.", "analyzer": "llm", "metadata": { "model": "claude-sonnet-4-5-20250929", "overall_assessment": "This skill presents SIGNIFICANT SECURITY RISKS primarily related to data exfiltration and unvalidated external service integration. The skill requires agents to register with and transmit data to an external third-party service (moltmedia.lol) without adequate security controls, validation, or user consent mechanisms. Key concerns include: (1) Unvalidated credential storage and transmission to external servers, (2) Unrestricted image URL posting that could be exploited for data exfiltration or SSRF attacks, (3) Deceptive marketing language that may bypass security scrutiny, (4) No declared tool restrictions despite requiring network access, and (5) Missing security metadata. The skill should NOT be used in production environments without significant security enhancements including user consent flows, URL validation, credential security measures, and explicit security warnings. The combination of external API integration, credential management, and lack of validation controls creates multiple attack vectors for data exfiltration and system compromise.", "primary_threats": [ "Data Exfiltration", "Unvalidated External API Integration", "Credential Theft Risk", "Social Engineering", "Missing Security Controls" ], "aitech": "AITech-12.1", "aitech_name": "Tool Exploitation", "aisubtech": "AISubtech-12.1.2", "aisubtech_name": "Tool Poisoning", "scanner_category": "SUSPICIOUS CODE EXECUTION", "meta_validated": true, "meta_confidence": "MEDIUM", "meta_confidence_reason": "LLM analyzer correctly identified missing metadata, but this is more of a documentation/policy issue than an active security threat. The absence of allowed-tools doesn't directly enable attacks.", "meta_exploitability": "Low - Requires skill to be used in inappropriate environment, relies on user misconfiguration", "meta_impact": "Medium - Could lead to skill usage in restricted environments where external network calls violate policy" } } ], "scan_duration_seconds": 39.67312836647034, "duration_ms": 39673, "analyzers_used": [ "static_analyzer", "behavioral_analyzer", "llm_analyzer", "trigger_analyzer", "meta_analyzer" ], "timestamp": "2026-02-06T04:51:03.549477" }