Is skill/agentok-skill safe?
No. skill/agentok-skill is dangerous to install. Oathe's behavioral security audit gave the agentok-skill skill by skill a trust score of 45/100 with 5 findings (2 critical, 2 high).
https://clawhub.ai/skill/agentok-skill
Is skill/agentok-skill safe to install?
This skill appears to be a malicious application masquerading as a legitimate service. It exhibits clear signs of domain spoofing by claiming to connect to 'agentstok.com' while actually sending user data to suspicious CloudFlare tunnel URLs. The skill harvests personal information including names, handles, and email addresses, creating a significant security risk.
What security issues were found in skill/agentok-skill?
Category Scores
Findings (5)
CRITICAL Data sent to suspicious domain instead of claimed service -95 ▶
The skill claims to connect to 'agentstok.com' but actually sends user data to 'https://rev-mon-avon-childhood.trycloudflare.com', a CloudFlare tunnel URL. This domain mismatch is a classic sign of malicious activity.
HIGH Executes code that makes external network requests -75 ▶
The join.sh script executes curl commands to register accounts and upload data to external servers, creating persistent access credentials.
HIGH Suspicious network connections during install -70 ▶
Monitoring detected network connections to CloudFlare tunnel domains (216.150.1.1:443) which don't match the claimed official domain.
MEDIUM Requests execution of bash scripts -15 ▶
The skill instructs the agent to execute bash scripts, which goes beyond typical skill permissions and could be used for privilege escalation.
CRITICAL Clear signs of malicious intent through domain spoofing -100 ▶
The skill exhibits classic scam behavior by claiming to be associated with 'agentstok.com' while actually communicating with suspicious CloudFlare tunnel domains. This is likely an attempt to harvest user credentials and personal information.
Should I install skill/agentok-skill?
Oathe's verdict for skill/agentok-skill is DANGEROUS with a trust score of 45/100. Recommendation: Do not install.