molttalent

clawhub:molttalent

View source

92/100

First Seen

Feb 18, 2026

Last Scanned

Feb 22, 2026

Findings

Score

92/100

MEDIUM 1

LOW 1

Findings (2)

MEDIUM

Read sensitive files and transmit externally EXFIL_013

exfiltration L74

Detects skills that both read sensitive credential files and send data to external services

cat > ~/.config/molttalent/credentials + send your API key to `https://api

FIX

Block access to git credentials, SSH keys, and repository tokens. If git operations are needed, use scoped deploy keys and restrict the tool to specific repositories.

FP?

Likely FP if the match is documentation about git configuration (e.g., setting up git credentials helper) rather than code that reads and transmits them.

LOW

Runtime URL controlling behavior THIRDPARTY_001

third-party-content L146

Detects URLs fetched at runtime that control or influence agent behavior without pinning

Fetch https:// + prompt

FIX

Avoid loading configuration or behavior-controlling content from runtime URLs. Bundle required configurations locally or pin remote config to versioned, integrity-verified endpoints.

FP?

Likely FP if the URL in the match is a documentation link or example URL (e.g., example.com) rather than an actual runtime-fetched configuration endpoint.