headless-vault-cli

clawhub:headless-vault-cli

View source
F
0/100

First Seen

Feb 18, 2026

Last Scanned

Feb 22, 2026

Findings

13

Score

0/100

MEDIUM 13

Findings (13)

MEDIUM
Base64-encoded instructions
L87

Detects instructions to decode and execute base64 content

base64 → UHJvamVjdHMvUGxhbi5tZA==
FIX

Remove text that simulates multi-turn conversations or fake user/assistant message pairs. These patterns attempt to manipulate the agent by fabricating conversation history.

FP?

Likely FP if the matched text is documentation showing example conversations or API request/response formats for illustration purposes.

MEDIUM
Base64-encoded instructions
L90

Detects instructions to decode and execute base64 content

base64 → TWVldGluZyBOb3Rlcw==
FIX

Remove text that simulates multi-turn conversations or fake user/assistant message pairs. These patterns attempt to manipulate the agent by fabricating conversation history.

FP?

Likely FP if the matched text is documentation showing example conversations or API request/response formats for illustration purposes.

MEDIUM
Base64-encoded instructions
L98

Detects instructions to decode and execute base64 content

base64 → UHJvamVjdHMvUGxhbi5tZA==
FIX

Remove text that simulates multi-turn conversations or fake user/assistant message pairs. These patterns attempt to manipulate the agent by fabricating conversation history.

FP?

Likely FP if the matched text is documentation showing example conversations or API request/response formats for illustration purposes.

MEDIUM
Base64-encoded instructions
L107

Detects instructions to decode and execute base64 content

base64 → UHJvamVjdHMvUGxhbi5tZA==
FIX

Remove text that simulates multi-turn conversations or fake user/assistant message pairs. These patterns attempt to manipulate the agent by fabricating conversation history.

FP?

Likely FP if the matched text is documentation showing example conversations or API request/response formats for illustration purposes.

MEDIUM
Base64 encode and send
L113

Detects base64 encoding of content followed by transmission

base64 encode + curl
FIX

Block patterns that base64-encode data and immediately transmit it. If base64 encoding is needed, ensure the encoded data does not contain secrets and destinations are allowlisted.

FP?

Likely FP if base64 encoding is used for legitimate purposes like encoding images for display or constructing data URIs, with no network transmission.

MEDIUM
Base64-encoded instructions
L121

Detects instructions to decode and execute base64 content

base64 → Tm90ZXMvTW9ybmluZyBCcmllZi5tZA==
FIX

Remove text that simulates multi-turn conversations or fake user/assistant message pairs. These patterns attempt to manipulate the agent by fabricating conversation history.

FP?

Likely FP if the matched text is documentation showing example conversations or API request/response formats for illustration purposes.

MEDIUM
Base64-encoded instructions
L122

Detects instructions to decode and execute base64 content

base64 → IyBIZWxsbwoKV29ybGQ=
FIX

Remove text that simulates multi-turn conversations or fake user/assistant message pairs. These patterns attempt to manipulate the agent by fabricating conversation history.

FP?

Likely FP if the matched text is documentation showing example conversations or API request/response formats for illustration purposes.

MEDIUM
Base64-encoded instructions
L173

Detects instructions to decode and execute base64 content

base64 → UHJvamVjdHMvUGxhbi5tZA==
FIX

Remove text that simulates multi-turn conversations or fake user/assistant message pairs. These patterns attempt to manipulate the agent by fabricating conversation history.

FP?

Likely FP if the matched text is documentation showing example conversations or API request/response formats for illustration purposes.

MEDIUM
Base64-encoded instructions
L195

Detects instructions to decode and execute base64 content

base64 → TWVldGluZyBOb3Rlcy5tZA==
FIX

Remove text that simulates multi-turn conversations or fake user/assistant message pairs. These patterns attempt to manipulate the agent by fabricating conversation history.

FP?

Likely FP if the matched text is documentation showing example conversations or API request/response formats for illustration purposes.

MEDIUM
Base64-encoded instructions
L196

Detects instructions to decode and execute base64 content

base64 → IyMgQWdlbmRhCgotIEl0ZW0gMQotIEl0ZW0gMgo=
FIX

Remove text that simulates multi-turn conversations or fake user/assistant message pairs. These patterns attempt to manipulate the agent by fabricating conversation history.

FP?

Likely FP if the matched text is documentation showing example conversations or API request/response formats for illustration purposes.

MEDIUM
Base64-encoded instructions
L239

Detects instructions to decode and execute base64 content

base64 → QUkgRGlnZXN0IFNvdXJjZXMubWQ=
FIX

Remove text that simulates multi-turn conversations or fake user/assistant message pairs. These patterns attempt to manipulate the agent by fabricating conversation history.

FP?

Likely FP if the matched text is documentation showing example conversations or API request/response formats for illustration purposes.

MEDIUM
Base64-encoded instructions
L251

Detects instructions to decode and execute base64 content

base64 → ZGlnZXN0LzIwMjUtMDEtMjgtZGlnZXN0Lm1k
FIX

Remove text that simulates multi-turn conversations or fake user/assistant message pairs. These patterns attempt to manipulate the agent by fabricating conversation history.

FP?

Likely FP if the matched text is documentation showing example conversations or API request/response formats for illustration purposes.

MEDIUM
Base64-encoded instructions
L252

Detects instructions to decode and execute base64 content

base64 → IyMgU3VtbWFyeQoKS2V5IHBvaW50cyBmcm9tIHRvZGF5J3Mgc291cmNlcy4uLgo=
FIX

Remove text that simulates multi-turn conversations or fake user/assistant message pairs. These patterns attempt to manipulate the agent by fabricating conversation history.

FP?

Likely FP if the matched text is documentation showing example conversations or API request/response formats for illustration purposes.