CAIN-42 CAIN StudioAttack lab
Scan real skills, then write your own and try to slip something past the scanner.
5 attacks 2 controls live: nothing pre-recorded
- Pick a preset. Red ones are attacks, green ones are honest requests that must still work.
- Tamper. Choose any field and drop it, null it, change its type, upper-case it, flip one character, or add a field the product never asked for.
- Send and read the real reply, or run every preset and watch the scoreboard fill.
What each preset tests
| Preset | Route | Why it matters | |
|---|---|---|---|
| attack | Sample skill: ClawHub Weather & Travel Bot (Poisoned Description) | POST /openclaw-keystone/scan | Agent skills and plugins are read before install: instructions, code, tools, privilege. |
| attack | Sample skill: OpenClaw DevOps Terminal Runner (Unconstrained Execution) | POST /openclaw-keystone/scan | Agent skills and plugins are read before install: instructions, code, tools, privilege. |
| attack | Sample skill: Smart Home Hub Skill (Cross-Skill Memory Snoop) | POST /openclaw-keystone/scan | Agent skills and plugins are read before install: instructions, code, tools, privilege. |
| control | Sample skill: Clean GitHub Issue Sync Skill | POST /openclaw-keystone/scan | Agent skills and plugins are read before install: instructions, code, tools, privilege. |
| control | Your skill: honest weather lookup | POST /openclaw-keystone/scan-skill | Ordinary skills pass. |
| attack | Your skill: injection in the description | POST /openclaw-keystone/scan-skill | The description is read by the model, so it is screened. |
| attack | Your skill: code reads ~/.ssh | POST /openclaw-keystone/scan-skill | Code is parsed, not just its manifest. |
Tamper with any field and send it again: a verifier must answer no, never crash or say yes. Public demo routes are rate limited per address; a 429 shows as rate limited. Our own lab; no independent test.
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.