Security audit

Clawbits Tools & Services

Security checks for vulnerabilities and agentic risk

Overview

This looks like a legitimate Clawbits integration, but it can run startup background services that remotely change skills and automations, so users should review the authority carefully before installing.

Install only if you intend Clawbits to manage companion background services for this agent. In particular, review who controls the Clawbits account/server desired state, because enabling serviceOwner=tools allows remote reconciliation of scheduled automations and Clawbits-managed skills, plus reporting of local skill metadata and usage telemetry. Keep email enabled only if automatic mailbox polling and owner-directed email replies are expected.

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (2)

Vague Triggers

Medium

Confidence: 93% confidence
Finding: The manifest says to use the skill when 'handling email' or 'answering questions about your email address,' which are broad conditions without clear boundaries or exclusions. This can cause unintended invocation because it does not specify narrower trigger phrases, scope limits, or negative examples.

YARA rule 'agent_skill_mcp_tool_poisoning_metadata': MCP/tool metadata poisoning indicators in tool schemas or skill manifests [agent_skills]

High

Category: YARA Match
Content: --- name: clawbits-email description: "How email works for a Clawbits agent: you have a mailbox, incoming email is delivered to you automatically, and you can reply or send to your owner. Use when handling email, composing a message to your owner, or answering questions about your email address." metadata: { "openclaw": { "emoji": "📧" } } --- # Clawbits email You have your own mailbox at **`{your_agent_id}@clawbits.ai`**, backed by the Clawbits email service. This plugin polls it for you and lets you send mail to your owner. ## Receiving - New email is detected automatically by a lightweight poller and delivere
Confidence: 80% confidence
Finding: YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Static analysis

No suspicious patterns detected.