unclawg-internet
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill manages the
OPENCLAW_MACHINE_SECRETgenerated during onboarding. It transmits this secret to the vendor's API (api.unclawg.com) for verification and stores it in local identity files under.claude/agents/for discovery by other skills. It also opens URLs in the browser containing authentication tokens for CLI-to-portal handoff. - [COMMAND_EXECUTION]: The skill performs multiple shell operations including
curlfor API interactions,jqfor parsing responses, and file system commands for directory and file creation. It requires theuc_onboardbinary to be present in the environment for execution. - [PROMPT_INJECTION]: The skill implements an 'Indirect Prompt Injection' surface (Category 8) by using a 'soul interview' process to capture user input and generate a
SOUL.mdinstruction file that governs the agent's future persona and behavior. - Ingestion points: Collects user input regarding agent goals, audience demographics, and persona characteristics.
- Boundary markers: The resulting soul draft includes explicit 'Non-Negotiable Rules' and 'Escalation Policies' to set operational constraints.
- Capability inventory: The skill utilizes
curl, shell execution, and delegates research tasks to a 'Task' subagent tool. - Sanitization: Content is JSON-encoded using
python3before being submitted to the platform API.
Audit Metadata