ClawHub
Back to skill

Security audit

Customer Onboarding

Security checks for vulnerabilities and agentic risk

Overview

This skill is a plain customer-onboarding prompt with no executable code, though it includes optional promotional install commands for other unreviewed skills.

Installing this skill itself appears low risk and limited to onboarding assistance. Treat the advertised extra `clawhub install` commands and external links as promotional material; inspect those separate skills and prefer pinned or verified versions before installing them.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T08 · Insecure Dependencies

Warning
Location
SKILL.md:60
Finding

Unpinned Third-Party Skill Installation Recommendations

Content
View full analysis

Vulnerability Details

File Location: SKILL.md, lines 60–81
Vulnerability Type: Supply-chain exposure through unpinned third-party Skill installation commands
Risk Level: Medium

Vulnerable Code Snippet

markdown
## 🔗 More AfrexAI Skills (Free on ClawHub)

| Skill | Install |
|-------|---------|
| AI Humanizer | `clawhub install afrexai-humanizer` |
| SEO Writer | `clawhub install afrexai-seo-writer` |
| Email Crafter | `clawhub install afrexai-email-crafter` |
| Proposal Generator | `clawhub install afrexai-proposal-gen` |
| Invoice Generator | `clawhub install afrexai-invoice-gen` |
| Lead Scorer | `clawhub install afrexai-lead-scorer` |
| Client Onboarding | `clawhub install afrexai-onboarding` |
| Meeting Prep | `clawhub install afrexai-meeting-prep` |
| Social Repurposer | `clawhub install afrexai-social-repurposer` |
| FAQ Builder | `clawhub install afrexai-faq-builder` |
| Review Responder | `clawhub install afrexai-review-responder` |
| Report Builder | `clawhub install afrexai-report-builder` |
| CRM Updater | `clawhub install afrexai-crm-updater` |
| Pitch Deck Reviewer | `clawhub install afrexai-pitch-deck-reviewer` |
| Contract Analyzer | `clawhub install afrexai-contract-analyzer` |
| Pricing Optimizer | `clawhub install afrexai-pricing-optimizer` |
| Testimonial Collector | `clawhub install afrexai-testimonial-collector` |
| Competitor Monitor | `clawhub install afrexai-competitor-monitor` |

Technical Analysis

The Skill recommends installing 18 external packages by mutable package name. The commands do not pin immutable versions, verify cryptographic hashes or signatures, identify reviewed source revisions, or require inspection of the downloaded Skills before activation.

These packages are not included in the audited project, so their behavior and integrity cannot be established from the available files. If a registry package or publisher account is compromised, or if package resolution otherwise returns an unsa ...[truncated 2013 chars]

Remediation
View remediation

Remediation Suggestions

  1. Remove installation advertisements that are unrelated to the Customer Onboarding Skill's required functionality.
  2. If external Skills are genuinely required, declare them explicitly as dependencies rather than presenting optional shell commands in operational instructions.
  3. Pin every dependency to an immutable, reviewed version or content digest.
  4. Publish and verify cryptographic hashes or signatures for downloaded artifacts.
  5. Link to a verifiable source repository and reviewed commit for each dependency.
  6. Require users to inspect dependency instructions and scripts before installation or activation.
  7. Use an allowlisted registry namespace with publisher identity verification and package ownership controls.
  8. Install external Skills with least privilege and prevent them from automatically receiving filesystem, credential, network, or command-execution access.
  9. Add automated dependency scanning and periodic integrity verification to detect ownership changes or unexpected package revisions.
  10. Clearly distinguish optional promotional material from trusted operational instructions.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.