x-oauth-api

clawhub:x-oauth-api

View source
A
100/100

First Seen

Feb 18, 2026

Last Scanned

Feb 22, 2026

Findings

1

Score

100/100

LOW 1

Findings (1)

LOW
Screenshot or screen capture with transmission
L131

Detects screenshot/screen capture tools combined with upload or transmission

screenshot + Post to X (formerly Twitter) using the official X API
FIX

Block the ability to read and transmit contents of configuration files (.env, config.json, settings.yaml). Implement file path validation to prevent access to sensitive config files.

FP?

Likely FP if the skill reads config files to configure itself locally without transmitting the contents externally.