ClawHub
Back to skill

Security audit

AI-Warden — Prompt Injection Protection

Security checks for vulnerabilities and agentic risk

Overview

The setup is coherent for installing AI-Warden, but it can activate a broad security plugin and optional online scanning without enough detail about runtime data handling.

Review this before installing. Prefer offline mode unless you are comfortable with AI-Warden processing scanned agent content externally. If enabling API mode, look for clear endpoint, payload, redaction, retention, and logging documentation from the publisher. Install only from a trusted environment, inspect the npm package before activation, and keep the documented backup so OpenClaw config can be restored.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (2)

other

Error
Location
SKILL.md:168
Finding

Undeclared Runtime Transmission of Potentially Sensitive Agent Content

Content
View full analysis
Remediation
View remediation

T08 · Insecure Dependencies

Warning
Location
SKILL.md:79
Finding

Third-Party Package Is Installed and Activated Without Independent Integrity Enforcement

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The trigger phrases are broad enough to match generic security and setup requests such as "security plugin" or "protect my agent," which can cause this skill to activate outside its intended scope. Because the skill performs installation and configuration actions with filesystem and network side effects, over-triggering increases the chance of inappropriate package installation or config modification during unrelated conversations.

Content

No source excerpt is available for this finding.

Session Persistence

Medium
Category
Rogue Agent
Confidence
60% confidence
Finding

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Content

Scanner excerpt · SKILL.md (reported line 64)May include surrounding context.

Verify: Output is BACKUP OK.

Step 1: Create extension directory

bash
mkdir -p ~/.openclaw/extensions/ai-warden