Security audit

Reagent Expiry Alert

Security checks for vulnerabilities and agentic risk

Overview

The skill is a narrow local reagent-expiry tracker with expected inventory storage, but users should be aware of local persistence, file-hardening gaps, and an expired-item display bug.

Use this only for ordinary, non-regulated reagent expiry tracking. Before installing, understand that it stores inventory details locally at ~/.openclaw/reagent_inventory.json in plaintext, so avoid use on shared accounts or for sensitive regulated inventory. Manually verify expired-item reports until the overdue display bug is fixed, and keep backups if the inventory matters operationally.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/main.py:20
Finding: Insecure Inventory File Handling Enables Symlink-Based File Overwrite and Data Exposure
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (3)

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 70% confidence
Finding: Without declared permissions the skill's intent is opaque and cannot be validated.
Content: No source excerpt is available for this finding.

Intent-Code Divergence

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The code comment/docstring frames this function as checking upcoming expirations, and the print logic later distinguishes overdue items using negative day counts. However, line L055 stores abs(days_until) for expired reagents, which prevents _print_alerts from ever seeing a negative value and causes overdue reagents to be reported as having days left instead of being overdue.
Content: No source excerpt is available for this finding.

Missing User Warnings

Low

Category: Not specified by scanner
Confidence: 87% confidence
Finding: This code automatically creates and writes to ~/.openclaw/reagent_inventory.json, which persists reagent metadata such as barcodes, names, locations, and expiry dates. Although the write is part of the tool's purpose, there is no clear user-facing disclosure in the code before persistence occurs beyond a post-action success message.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.