📦
Audit History
openserv-ideaboard-api - 2 audits
Version comparison
Capability and finding changes across audited versions, newest first.
Audit version 2 Latest
Jul 21, 2026, 04:29 AM
Most static alerts are false positives caused by Markdown fences, JavaScript template literals, expected API calls, and documented credential configuration. Two confirmed findings show credentials in terminal output, and the agent workflow lacks a boundary for untrusted public ideaboard content. The author should prevent secret printing and require review of public content before acting on it.
8
Files scanned
1,541
Lines analyzed
8
Review items
0
False positives ignored
Confirmed security concerns (2)
High
Crypto seed/private key mention
console.log(`WALLET_PRIVATE_KEY=${privateKey}`);
When no wallet key is configured, the example prints a newly generated private key in plaintext. This can expose control of the generated wallet through logs or terminal history.
High
Untrusted Ideaboard Content Can Influence Agent Decisions
The workflow instructs agents to read public idea descriptions and comments before choosing work, but does not require treating that content as untrusted. A malicious submission could contain prompt-injection text that persuades an agent to disclose data, run unsafe actions, or follow unrelated instructions.
The documented workflow explicitly consumes public descriptions and comments before an agent acts, with no prompt-injection boundary or review step. This creates a clear indirect-instruction risk.
Capability review items (2)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Generic API/secret keys
console.log(`OPENSERV_API_KEY=${data.apiKey}`);
The example prints the newly issued API key in plaintext. Terminal history, logs, or screen sharing can expose this credential.
High
Generic API/secret keys
console.log(`WALLET_PRIVATE_KEY=${privateKey}`);
The example prints a wallet private key in plaintext when it generates one. Terminal output can be retained or shared, exposing the wallet credential.
Risk Factors
⚙️ External commands (50)
examples/browse-ideas.ts:25 examples/browse-ideas.ts:27 examples/browse-ideas.ts:28 examples/browse-ideas.ts:30 examples/browse-ideas.ts:42 examples/browse-ideas.ts:48 examples/browse-ideas.ts:50 examples/browse-ideas.ts:52 examples/browse-ideas.ts:53 examples/browse-ideas.ts:54 examples/browse-ideas.ts:57 examples/browse-ideas.ts:59 examples/browse-ideas.ts:61 examples/browse-ideas.ts:74 examples/get-api-key.ts:26 examples/get-api-key.ts:62 examples/get-api-key.ts:65 examples/pick-up-and-ship.ts:44 examples/pick-up-and-ship.ts:53 examples/pick-up-and-ship.ts:57 examples/pick-up-and-ship.ts:64 examples/pick-up-and-ship.ts:65 examples/pick-up-and-ship.ts:66 examples/pick-up-and-ship.ts:75 examples/pick-up-and-ship.ts:76 examples/pick-up-and-ship.ts:81 examples/pick-up-and-ship.ts:107 examples/pick-up-and-ship.ts:108 examples/submit-idea.ts:35-44 examples/submit-idea.ts:49 examples/submit-idea.ts:50 examples/submit-idea.ts:56 examples/submit-idea.ts:57 examples/submit-idea.ts:62 SKILL.md:12 SKILL.md:13 SKILL.md:14 SKILL.md:16 SKILL.md:28 SKILL.md:38-40 SKILL.md:40-44 SKILL.md:44-46 SKILL.md:46-59 SKILL.md:59-90 SKILL.md:90-92 SKILL.md:92 SKILL.md:98-111 SKILL.md:111-112 SKILL.md:112-116 SKILL.md:116-118
🌐 Network access (49)
examples/browse-ideas.ts:12 examples/browse-ideas.ts:14 examples/browse-ideas.ts:15 examples/get-api-key.ts:14 examples/get-api-key.ts:18 examples/get-api-key.ts:19 examples/get-api-key.ts:42 examples/pick-up-and-ship.ts:15 examples/pick-up-and-ship.ts:24 examples/pick-up-and-ship.ts:84 examples/pick-up-and-ship.ts:86 examples/pick-up-and-ship.ts:115 examples/pick-up-and-ship.ts:25 examples/pick-up-and-ship.ts:101 examples/pick-up-and-ship.ts:102 examples/pick-up-and-ship.ts:103 examples/submit-idea.ts:14 examples/submit-idea.ts:23 examples/submit-idea.ts:69 examples/submit-idea.ts:24 examples/submit-idea.ts:57 examples/submit-idea.ts:62 reference.md:216 reference.md:85 reference.md:129 reference.md:200 reference.md:255 reference.md:312 reference.md:316 reference.md:340 reference.md:378 reference.md:430 SKILL.md:39 SKILL.md:47 SKILL.md:51 SKILL.md:99 SKILL.md:101 SKILL.md:119 SKILL.md:121 SKILL.md:92 SKILL.md:16 SKILL.md:52 SKILL.md:73 SKILL.md:101 SKILL.md:122 SKILL.md:133 SKILL.md:305 SKILL.md:311 SKILL.md:312
🔑 Env variables (45)
examples/browse-ideas.ts:11 examples/env.example:5 examples/env.example:9 examples/get-api-key.ts:26 examples/get-api-key.ts:64 examples/get-api-key.ts:26 examples/get-api-key.ts:64 examples/get-api-key.ts:13 examples/get-api-key.ts:10 examples/get-api-key.ts:26 examples/get-api-key.ts:62 examples/get-api-key.ts:64 examples/get-api-key.ts:65 examples/pick-up-and-ship.ts:17 examples/pick-up-and-ship.ts:33 examples/pick-up-and-ship.ts:17 examples/pick-up-and-ship.ts:33 examples/pick-up-and-ship.ts:14 examples/pick-up-and-ship.ts:10 examples/pick-up-and-ship.ts:17 examples/pick-up-and-ship.ts:19 examples/pick-up-and-ship.ts:20 examples/pick-up-and-ship.ts:28 examples/submit-idea.ts:16 examples/submit-idea.ts:16 examples/submit-idea.ts:13 examples/submit-idea.ts:10 examples/submit-idea.ts:16 examples/submit-idea.ts:18 examples/submit-idea.ts:19 examples/submit-idea.ts:27 SKILL.md:59 SKILL.md:123 SKILL.md:59 SKILL.md:123 SKILL.md:28 SKILL.md:44 SKILL.md:57 SKILL.md:59 SKILL.md:87 SKILL.md:92 SKILL.md:123 SKILL.md:162 troubleshooting.md:25 troubleshooting.md:116
📁 Filesystem access (1)
Audited by: claude
Jul 9, 2026, 11:53 PM
Most command, filesystem, and reconnaissance findings are false positives caused by Markdown backticks, TypeScript template literals, placeholders, and API path documentation. Real risk remains from outbound OpenServ API calls, environment-based credential handling, and get-api-key.ts printing live API and wallet secrets. No prompt injection language was found in the reviewed files.
8
Files scanned
1,541
Lines analyzed
76
Review items
0
False positives ignored
Confirmed security concerns (15)
High
Environment file access
(process.env.WALLET_PRIVATE_KEY as `0x${string}`) || generatePrivateKey();
The code or runnable documentation creates, reads, or uses wallet private key material. This is sensitive and requires careful handling.
High
Crypto seed/private key mention
const privateKey =
The code or runnable documentation creates, reads, or uses wallet private key material. This is sensitive and requires careful handling.
High
Crypto seed/private key mention
(process.env.WALLET_PRIVATE_KEY as `0x${string}`) || generatePrivateKey();
The code or runnable documentation creates, reads, or uses wallet private key material. This is sensitive and requires careful handling.
High
Crypto seed/private key mention
const account = privateKeyToAccount(privateKey);
The code or runnable documentation creates, reads, or uses wallet private key material. This is sensitive and requires careful handling.
High
Crypto seed/private key mention
console.log(`WALLET_PRIVATE_KEY=${privateKey}`);
The code prints or returns wallet private key material. That can expose credentials through terminals, logs, or caller output.
High
Crypto seed/private key mention
return { apiKey: data.apiKey, user: data.user, privateKey };
The code prints or returns wallet private key material. That can expose credentials through terminals, logs, or caller output.
High
Environment file access
const API_KEY = process.env.OPENSERV_API_KEY;
The code or runnable documentation creates, reads, or uses wallet private key material. This is sensitive and requires careful handling.
High
Environment file access
const API_KEY = process.env.OPENSERV_API_KEY;
The code or runnable documentation creates, reads, or uses wallet private key material. This is sensitive and requires careful handling.
High
Environment file access
(process.env.WALLET_PRIVATE_KEY as `0x${string}`) || generatePrivateKey();
The code or runnable documentation creates, reads, or uses wallet private key material. This is sensitive and requires careful handling.
High
Environment file access
headers: { 'x-openserv-key': process.env.OPENSERV_API_KEY },
The code or runnable documentation creates, reads, or uses wallet private key material. This is sensitive and requires careful handling.
High
Crypto seed/private key mention
const privateKey =
The code or runnable documentation creates, reads, or uses wallet private key material. This is sensitive and requires careful handling.
High
Crypto seed/private key mention
(process.env.WALLET_PRIVATE_KEY as `0x${string}`) || generatePrivateKey();
The code or runnable documentation creates, reads, or uses wallet private key material. This is sensitive and requires careful handling.
High
Crypto seed/private key mention
const account = privateKeyToAccount(privateKey);
The code or runnable documentation creates, reads, or uses wallet private key material. This is sensitive and requires careful handling.
High
Credential Disclosure Through Console Output
examples/get-api-key.ts prints the returned API key and generated WALLET_PRIVATE_KEY to stdout for .env setup. Shared terminals, command logs, or CI logs could retain those secrets.
The file directly logs data.apiKey and the generated privateKey. This is a clear secret exposure path when output is captured.
Medium
Authenticated External Actions by Agents
The skill guides agents to submit ideas, pick up work, ship services, upvote, and comment with an API key. These are intentional workflows, but they create account-visible side effects.
The workflow language explicitly tells agents to perform authenticated Ideaboard actions. The risk is business-logic impact, not hidden code execution.
Capability review items (57)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Generic API/secret keys · 2 occurrences
(process.env.WALLET_PRIVATE_KEY as `0x${string}`) || generatePrivateKey();
The code or runnable documentation handles OPENSERV_API_KEY or WALLET_PRIVATE_KEY. This is legitimate, but live credentials can be exposed or misused if mishandled.
High
Generic API/secret keys
console.log(`OPENSERV_API_KEY=${data.apiKey}`);
The code or runnable documentation handles OPENSERV_API_KEY or WALLET_PRIVATE_KEY. This is legitimate, but live credentials can be exposed or misused if mishandled.
High
Generic API/secret keys
console.log(`WALLET_PRIVATE_KEY=${privateKey}`);
The code or runnable documentation handles OPENSERV_API_KEY or WALLET_PRIVATE_KEY. This is legitimate, but live credentials can be exposed or misused if mishandled.
High
Generic API/secret keys · 2 occurrences
const API_KEY = process.env.OPENSERV_API_KEY;
The code or runnable documentation handles OPENSERV_API_KEY or WALLET_PRIVATE_KEY. This is legitimate, but live credentials can be exposed or misused if mishandled.
High
Generic API/secret keys · 2 occurrences
"x-openserv-key": API_KEY,
The code or runnable documentation handles OPENSERV_API_KEY or WALLET_PRIVATE_KEY. This is legitimate, but live credentials can be exposed or misused if mishandled.
High
Generic API/secret keys
headers: { 'x-openserv-key': process.env.OPENSERV_API_KEY },
The code or runnable documentation handles OPENSERV_API_KEY or WALLET_PRIVATE_KEY. This is legitimate, but live credentials can be exposed or misused if mishandled.
Low
examples/browse-ideas.ts:12examples/get-api-key.ts:14examples/pick-up-and-ship.ts:15examples/submit-idea.ts:14
HTTP client library · 4 occurrences
import axios from "axios";
The example or API reference directs requests to OpenServ endpoints. This is intended behavior, but it is real outbound network access.
Low
examples/browse-ideas.ts:14examples/get-api-key.ts:18examples/pick-up-and-ship.ts:24examples/submit-idea.ts:23SKILL.md:51SKILL.md:121
HTTP client library · 6 occurrences
const api = axios.create({
The example or API reference directs requests to OpenServ endpoints. This is intended behavior, but it is real outbound network access.
Low
examples/browse-ideas.ts:15examples/get-api-key.ts:19examples/pick-up-and-ship.ts:25examples/submit-idea.ts:24
Hardcoded URL · 4 occurrences
baseURL: "https://api.launch.openserv.ai",
The example or API reference directs requests to OpenServ endpoints. This is intended behavior, but it is real outbound network access.
Low
examples/browse-ideas.ts:11examples/get-api-key.ts:13examples/pick-up-and-ship.ts:14examples/submit-idea.ts:13
dotenv library · 4 occurrences
import "dotenv/config";
The example uses dotenv or process.env to load configuration. This is expected for the workflow, but environment access is real and should be scoped.
Low
Environment variable access (dot notation) · 2 occurrences
(process.env.WALLET_PRIVATE_KEY as `0x${string}`) || generatePrivateKey();
The example uses dotenv or process.env to load configuration. This is expected for the workflow, but environment access is real and should be scoped.
Low
Environment variable access (dot notation)
if (!process.env.WALLET_PRIVATE_KEY) {
The example uses dotenv or process.env to load configuration. This is expected for the workflow, but environment access is real and should be scoped.
Low
Environment variable object · 2 occurrences
(process.env.WALLET_PRIVATE_KEY as `0x${string}`) || generatePrivateKey();
The example uses dotenv or process.env to load configuration. This is expected for the workflow, but environment access is real and should be scoped.
Low
Environment variable object
if (!process.env.WALLET_PRIVATE_KEY) {
The example uses dotenv or process.env to load configuration. This is expected for the workflow, but environment access is real and should be scoped.
Low
Environment variable access (dot notation) · 2 occurrences
const API_KEY = process.env.OPENSERV_API_KEY;
The example uses dotenv or process.env to load configuration. This is expected for the workflow, but environment access is real and should be scoped.
Low
Environment variable access (dot notation)
const ideaId = process.env.IDEA_ID;
The example uses dotenv or process.env to load configuration. This is expected for the workflow, but environment access is real and should be scoped.
Low
Environment variable object · 2 occurrences
const API_KEY = process.env.OPENSERV_API_KEY;
The example uses dotenv or process.env to load configuration. This is expected for the workflow, but environment access is real and should be scoped.
Low
Environment variable object
const ideaId = process.env.IDEA_ID;
The example uses dotenv or process.env to load configuration. This is expected for the workflow, but environment access is real and should be scoped.
Low
Hardcoded URL
` curl "https://api.launch.openserv.ai/ideas/${idea._id}"`,
The example or API reference directs requests to OpenServ endpoints. This is intended behavior, but it is real outbound network access.
Low
Hardcoded URL
curl 'https://api.launch.openserv.ai/ideas?sort=hot&limit=10'
The example or API reference directs requests to OpenServ endpoints. This is intended behavior, but it is real outbound network access.
Low
Hardcoded URL
curl 'https://api.launch.openserv.ai/ideas/:id'
The example or API reference directs requests to OpenServ endpoints. This is intended behavior, but it is real outbound network access.
Low
Hardcoded URL
curl -X POST 'https://api.launch.openserv.ai/ideas' \
The example or API reference directs requests to OpenServ endpoints. This is intended behavior, but it is real outbound network access.
Low
Hardcoded URL
curl -X POST 'https://api.launch.openserv.ai/ideas/:id/pickup' \
The example or API reference directs requests to OpenServ endpoints. This is intended behavior, but it is real outbound network access.
Low
Hardcoded URL
curl -X POST 'https://api.launch.openserv.ai/ideas/:id/ship' \
The example or API reference directs requests to OpenServ endpoints. This is intended behavior, but it is real outbound network access.
Low
Hardcoded URL
curl -X POST 'https://api.launch.openserv.ai/ideas/:id/upvote' \
The example or API reference directs requests to OpenServ endpoints. This is intended behavior, but it is real outbound network access.
Low
Hardcoded URL
curl -X POST 'https://api.launch.openserv.ai/ideas/:id/comment' \
The example or API reference directs requests to OpenServ endpoints. This is intended behavior, but it is real outbound network access.
Low
HTTP client library · 3 occurrences
import axios from 'axios';
The example or API reference directs requests to OpenServ endpoints. This is intended behavior, but it is real outbound network access.
Low
HTTP client library
const api = axios.create({ baseURL: 'https://api.launch.openserv.ai' });
The example or API reference directs requests to OpenServ endpoints. This is intended behavior, but it is real outbound network access.
Low
Hardcoded URL
**Base URL:** `https://api.launch.openserv.ai`
The example or API reference directs requests to OpenServ endpoints. This is intended behavior, but it is real outbound network access.
Low
Hardcoded URL · 2 occurrences
baseURL: 'https://api.launch.openserv.ai',
The example or API reference directs requests to OpenServ endpoints. This is intended behavior, but it is real outbound network access.
Low
Hardcoded URL
const api = axios.create({ baseURL: 'https://api.launch.openserv.ai' });
The example or API reference directs requests to OpenServ endpoints. This is intended behavior, but it is real outbound network access.
Low
Environment variable access (dot notation)
headers: { 'x-openserv-key': process.env.OPENSERV_API_KEY },
The example uses dotenv or process.env to load configuration. This is expected for the workflow, but environment access is real and should be scoped.
Low
Environment variable object
headers: { 'x-openserv-key': process.env.OPENSERV_API_KEY },
The example uses dotenv or process.env to load configuration. This is expected for the workflow, but environment access is real and should be scoped.
Risk Factors
⚙️ External commands (50)
examples/browse-ideas.ts:25 examples/browse-ideas.ts:27 examples/browse-ideas.ts:28 examples/browse-ideas.ts:30 examples/browse-ideas.ts:42 examples/browse-ideas.ts:48 examples/browse-ideas.ts:50 examples/browse-ideas.ts:52 examples/browse-ideas.ts:53 examples/browse-ideas.ts:54 examples/browse-ideas.ts:57 examples/browse-ideas.ts:59 examples/browse-ideas.ts:61 examples/browse-ideas.ts:74 examples/get-api-key.ts:26 examples/get-api-key.ts:62 examples/get-api-key.ts:65 examples/pick-up-and-ship.ts:44 examples/pick-up-and-ship.ts:53 examples/pick-up-and-ship.ts:57 examples/pick-up-and-ship.ts:64 examples/pick-up-and-ship.ts:65 examples/pick-up-and-ship.ts:66 examples/pick-up-and-ship.ts:75 examples/pick-up-and-ship.ts:76 examples/pick-up-and-ship.ts:81 examples/pick-up-and-ship.ts:107 examples/pick-up-and-ship.ts:108 examples/submit-idea.ts:35-44 examples/submit-idea.ts:49 examples/submit-idea.ts:50 examples/submit-idea.ts:56 examples/submit-idea.ts:57 examples/submit-idea.ts:62 SKILL.md:12 SKILL.md:13 SKILL.md:14 SKILL.md:16 SKILL.md:28 SKILL.md:38-40 SKILL.md:40-44 SKILL.md:44-46 SKILL.md:46-59 SKILL.md:59-90 SKILL.md:90-92 SKILL.md:92 SKILL.md:98-111 SKILL.md:111-112 SKILL.md:112-116 SKILL.md:116-118
🌐 Network access (49)
examples/browse-ideas.ts:12 examples/browse-ideas.ts:14 examples/browse-ideas.ts:15 examples/get-api-key.ts:14 examples/get-api-key.ts:18 examples/get-api-key.ts:19 examples/get-api-key.ts:42 examples/pick-up-and-ship.ts:15 examples/pick-up-and-ship.ts:24 examples/pick-up-and-ship.ts:84 examples/pick-up-and-ship.ts:86 examples/pick-up-and-ship.ts:115 examples/pick-up-and-ship.ts:25 examples/pick-up-and-ship.ts:101 examples/pick-up-and-ship.ts:102 examples/pick-up-and-ship.ts:103 examples/submit-idea.ts:14 examples/submit-idea.ts:23 examples/submit-idea.ts:69 examples/submit-idea.ts:24 examples/submit-idea.ts:57 examples/submit-idea.ts:62 reference.md:216 reference.md:85 reference.md:129 reference.md:200 reference.md:255 reference.md:312 reference.md:316 reference.md:340 reference.md:378 reference.md:430 SKILL.md:39 SKILL.md:47 SKILL.md:51 SKILL.md:99 SKILL.md:101 SKILL.md:119 SKILL.md:121 SKILL.md:92 SKILL.md:16 SKILL.md:52 SKILL.md:73 SKILL.md:101 SKILL.md:122 SKILL.md:133 SKILL.md:305 SKILL.md:311 SKILL.md:312
🔑 Env variables (45)
examples/browse-ideas.ts:11 examples/env.example:5 examples/env.example:9 examples/get-api-key.ts:26 examples/get-api-key.ts:64 examples/get-api-key.ts:26 examples/get-api-key.ts:64 examples/get-api-key.ts:13 examples/get-api-key.ts:10 examples/get-api-key.ts:26 examples/get-api-key.ts:62 examples/get-api-key.ts:64 examples/get-api-key.ts:65 examples/pick-up-and-ship.ts:17 examples/pick-up-and-ship.ts:33 examples/pick-up-and-ship.ts:17 examples/pick-up-and-ship.ts:33 examples/pick-up-and-ship.ts:14 examples/pick-up-and-ship.ts:10 examples/pick-up-and-ship.ts:17 examples/pick-up-and-ship.ts:19 examples/pick-up-and-ship.ts:20 examples/pick-up-and-ship.ts:28 examples/submit-idea.ts:16 examples/submit-idea.ts:16 examples/submit-idea.ts:13 examples/submit-idea.ts:10 examples/submit-idea.ts:16 examples/submit-idea.ts:18 examples/submit-idea.ts:19 examples/submit-idea.ts:27 SKILL.md:59 SKILL.md:123 SKILL.md:59 SKILL.md:123 SKILL.md:28 SKILL.md:44 SKILL.md:57 SKILL.md:59 SKILL.md:87 SKILL.md:92 SKILL.md:123 SKILL.md:162 troubleshooting.md:25 troubleshooting.md:116
📁 Filesystem access (1)
Audited by: codex