Versioned security assessment
Report ID: SA-64CA8AF0
7/8/2026, 12:42:21 PM
maxhub-skills security assessment v3
Skill Security Certification Report
Audit model: codex Historical report
- Skill name
- maxhub-skills
- Version
- v3
- Maintainer
- XieWxx
- Coverage
- 33 Files scanned · 13,250 Lines analyzed
- Policy version
- Unavailable
Highest confirmed finding severity
Critical
4 confirmed security findings require attention.
Installation context
Historical evidence
This report may not describe the currently installable artifact. Open the current Skill page for install guidance.
Open current Skill pageThis report does not block or authorize the manifest or ZIP.
Most static command, network, blocker, and obfuscation matches are documentation false positives. I confirmed credential handling risk for MAXHUB_API_KEY and added semantic findings for TikTok security bypass helpers, metric manipulation, user-cookie forwarding, and a security pre-approval claim. The skill should not be published until those high-risk capabilities and claims are removed or isolated.
Report position
Historical report
Open audit history before using this report to install.
Audit attestation
Not attestable
The required immutable binding is incomplete.
Human verification
Not verified
No human verification is recorded for this report.
Coverage
33 Files scanned · 13,250 Lines analyzed
71 items shown for review
Limitations
This report does not claim runtime or sandbox execution and does not prove the absence of side effects.
Evidence chain
Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.
Source
Binding unavailable
Artifact
Identity incomplete
Audit
Complete
Capabilities observed
Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.
Contains scripts
May execute code included with the Skill.
Not recorded by this audit
Network access
May connect to external services.
Observed in 106 evidence locations
Filesystem access
May read or write local files.
Not recorded by this audit
Env variables
May read values from the process environment.
Observed in 67 evidence locations
External commands
May invoke commands or programs outside the Skill.
Observed in 107 evidence locations
Capability review items (67)
High
Generic API/secret keys
2. 配置:`openclaw config set skills.entries.maxhub-lemon8.apiKey "<你的-key>"` 或 `export MAXHUB_API_KEY=
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
2. Configure: `openclaw config set skills.entries.maxhub-lemon8.apiKey "<your-key>"` or `export MAXH
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
primaryEnv: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
- MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
- name: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
Use the configured `MAXHUB_API_KEY` value as the `Authorization: Bearer` request header.
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
maxhub_auth_header="Authorization: Bearer ${MAXHUB_API_KEY}"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
[ -n "${MAXHUB_API_KEY:-}" ] && echo "ok" || echo "missing"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
> - OpenClaw/ClawHub:`openclaw config set skills.entries.maxhub-lemon8.apiKey "你的_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
> - 通用环境变量:`export MAXHUB_API_KEY="你的_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
> - OpenClaw/ClawHub: `openclaw config set skills.entries.maxhub-lemon8.apiKey "YOUR_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
> - Generic: `export MAXHUB_API_KEY="YOUR_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
2. 配置:`openclaw config set skills.entries.maxhub-tiktok.apiKey "<你的-key>"` 或 `export MAXHUB_API_KEY=
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
2. Configure: `openclaw config set skills.entries.maxhub-tiktok.apiKey "<your-key>"` or `export MAXH
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
primaryEnv: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
- MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
- name: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
Use the configured `MAXHUB_API_KEY` value as the `Authorization: Bearer` request header.
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
maxhub_auth_header="Authorization: Bearer ${MAXHUB_API_KEY}"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
[ -n "${MAXHUB_API_KEY:-}" ] && echo "ok" || echo "missing"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
> - OpenClaw/ClawHub:`openclaw config set skills.entries.maxhub-tiktok.apiKey "你的_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
> - 通用环境变量:`export MAXHUB_API_KEY="你的_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
> - OpenClaw/ClawHub: `openclaw config set skills.entries.maxhub-tiktok.apiKey "YOUR_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
> - Generic: `export MAXHUB_API_KEY="YOUR_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
2. 配置:`openclaw config set skills.entries.maxhub-toutiao.apiKey "<你的-key>"` 或 `export MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
2. Configure: `openclaw config set skills.entries.maxhub-toutiao.apiKey "<your-key>"` or `export MAX
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
primaryEnv: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
- MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
- name: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
Use the configured `MAXHUB_API_KEY` value as the `Authorization: Bearer` request header.
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
maxhub_auth_header="Authorization: Bearer ${MAXHUB_API_KEY}"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
[ -n "${MAXHUB_API_KEY:-}" ] && echo "ok" || echo "missing"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
> - OpenClaw/ClawHub:`openclaw config set skills.entries.maxhub-toutiao.apiKey "你的_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
> - 通用环境变量:`export MAXHUB_API_KEY="你的_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
> - OpenClaw/ClawHub: `openclaw config set skills.entries.maxhub-toutiao.apiKey "YOUR_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
> - Generic: `export MAXHUB_API_KEY="YOUR_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
2. 配置:`openclaw config set skills.entries.maxhub-wechat.apiKey "<你的-key>"` 或 `export MAXHUB_API_KEY=
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
2. Configure: `openclaw config set skills.entries.maxhub-wechat.apiKey "<your-key>"` or `export MAXH
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
primaryEnv: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
- MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
- name: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
Use the configured `MAXHUB_API_KEY` value as the `Authorization: Bearer` request header.
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
maxhub_auth_header="Authorization: Bearer ${MAXHUB_API_KEY}"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
[ -n "${MAXHUB_API_KEY:-}" ] && echo "ok" || echo "missing"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
> - OpenClaw/ClawHub:`openclaw config set skills.entries.maxhub-wechat.apiKey "你的_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
> - 通用环境变量:`export MAXHUB_API_KEY="你的_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
> - OpenClaw/ClawHub: `openclaw config set skills.entries.maxhub-wechat.apiKey "YOUR_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
> - Generic: `export MAXHUB_API_KEY="YOUR_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
export MAXHUB_API_KEY=mh_sk_your_api_key_here
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
export MAXHUB_API_KEY=mh_sk_your_api_key_here
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
export MAXHUB_API_KEY=mh_sk_your_api_key_here
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
primaryEnv: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
- MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
- name: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
所有技能统一通过 `MAXHUB_API_KEY` 认证,Base URL 为 `https://www.aconfig.cn`。
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
MAXHUB_API_KEY="your_api_key_here"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
maxhub_auth_header="Authorization: Bearer ${MAXHUB_API_KEY}"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
High
Generic API/secret keys
- **frontmatter.metadata.openclaw.primaryEnv**:统一为 `MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Risk findings
Confirmed security concerns are separated from items that still need review.
Confirmed security concerns (4)
RISK-001 Critical
maxhub-tiktok/SKILL.md:127-133maxhub-tiktok/references/api-video.md:7-35maxhub-tiktok/references/api-video.md:3916-4118
Platform Security Bypass Helpers Exposed
The TikTok routes include helpers for request signatures, encryption, fingerprints, msToken values, device registration, and guest cookies. These capabilities can support bypassing platform anti-automation controls.
The endpoint names and descriptions directly reference signatures, encryption, fingerprints, msToken generation, and device registration. This is strong semantic evidence of platform security bypass tooling.
RISK-002 Critical
Metric Manipulation Endpoint Exposed
The TikTok API reference documents a function that increases a video play count and returns a success status. This is a platform manipulation capability, not a read-only data query.
The cited description says the endpoint increases a work video play count and reports success or failure. That directly supports business-logic abuse and contradicts read-only positioning.
RISK-003 High
maxhub-tiktok/SKILL.md:66-78maxhub-tiktok/references/api-user.md:96-114maxhub-tiktok/references/api-user.md:161-181
User Cookie Forwarding to Third Party
Several TikTok endpoints accept or require user cookies for account-specific data. Forwarding browser cookies to MaxHub can expose account sessions and private user data.
The documentation explicitly warns that some endpoints require platform session cookies and shows cookie parameters. Cookies can authorize account access beyond simple public data retrieval.
RISK-004 High
Prompt Injection Attempt Detected
RECOMMENDATION.md claims the skill has passed ClawHub security review. Security pre-approval claims can bias automated review and must not be treated as authoritative.
The file contains a direct security-approval claim in marketplace-facing prose. It does not issue an explicit override command, so confidence is high but not maximal.
Remediation
Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.
- FIX-001CriticalTikTok security bypass helpers are documented and routable.Remove signature, encryption, fingerprint, msToken, device registration, and guest-cookie helper endpoints from routes and references.
- FIX-002CriticalA video play-count manipulation endpoint remains in the API reference.Delete metric manipulation endpoints and verify generated references do not include write or abuse-oriented actions.
- FIX-003HighSome endpoints request platform session cookies.Avoid browser cookies, require scoped tokens where available, and block endpoints that need full account sessions.
- FIX-004HighMarketplace prose claims prior security approval.Remove security pre-approval language and let marketplace audit results speak for the current package.
- FIX-005HighMAXHUB_API_KEY is a sensitive credential used by the skill.Document least-privilege keys, rotation, revocation, and the exact third-party destination for every request.
Expert evidence
Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.
Artifact subject
- Marketplace commit
- Unavailable
- Content hash
- Unavailable
- Tree hash
- Unavailable
- Skill path
- Unavailable
- Audit payload hash
- Unavailable
Analysis metadata
Audit model: codex
Analysis state: Complete
Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.
Verify and export
The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.
Audit attestation: not_attestable