ClawAudit verdict
x-twitter-news-search
Accesses credentials AND makes external network calls
Tweet search using TWITTER_BEARER_TOKEN against the official X API v2; fetch-only with no write operations, behavior matches stated news search purpose.
Automated static analysis — not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
What it does
These are capability combinations: each listed behavior occurs in the skill, but ClawAudit detects co-occurrence — it does not verify that one flows into another. Read the code to confirm a live chain.
Accesses credentials AND makes external network calls — potential credential theft
LLM02 · ASI03
Accesses credentials AND encodes data — may obfuscate stolen credentials
LLM02 · ASI03 · ASI04
Findings (1)
Instruction-prose smuggling shape detected: collects a sensitive target ("Bearer Token") and emits it outward ("attach"). Phrased as prose with no trigger tokens — a semantic prompt-injection / data-exfil pattern the syntactic scanners can't see. Final tier capped at Caution; review the instructions before installing.
SKILL.md · If missing, tell the user: 1. Go to https://developer.x.com 2. Create a **Project** and attach an **App** 3. Copy the **Bearer Token** 4. Save it: `hermes confi
Permissions & capabilities
Requires 1 environment variable. (1 sensitive: TWITTER_BEARER_TOKEN). Requires 2 system binaries. (1 elevated: curl).
network_outcredential_accessdata_encoding Thanks — recorded.