ClawHub
Back to skill

Security audit

OpenFun

Security checks for vulnerabilities and agentic risk

Overview

This skill appears purpose-built for AI short-video generation, but it relies on an unpinned global CLI install and a persistent logged-in token while allowing automated account-using actions.

Install only if you are comfortable using OpenFun as an external service for your video prompts and brand details. Prefer an isolated environment, verify the npm package source before installation, avoid shared machines, protect ~/.openfun/config.json, and have the agent confirm before rendering or batching actions that may consume account credits.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T08 · Insecure Dependencies

Warning
Location
SKILL.md:8
Finding

Unpinned Third-Party npm Package Installed Globally

Content
View full analysis
Remediation
View remediation
``` 2. Record and verify package provenance, including the expected npm registry, package publisher, source repository, release signature, and integrity digest. 3. Include a lockfile or equivalent integrity-controlled installation manifest where the Skill platform supports it. 4. Prefer a project-local or isolated installation over a global installation so the executable does not affect unrelated projects or sessions. 5. Audit the package source, npm lifecycle scripts, and transitive dependencies before allowing automated installation or execution. 6. Disable lifecycle scripts during installation when they are not required: ```bash npm install --global --ignore-scripts openfun-cli@ ``` If lifecycle scripts are required, review and explicitly approve them instead. 7. Run the CLI in a sandbox or restricted account with access only to the directories and network destinations required for video generation. 8. Ensure `~/.openfun/config.json` is created with owner-only permissions, avoid exposing it in logs or backups, and provide a documented token-revocation procedure. 9. Revalidate package integrity and security before updating the pinned version. ]]>

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Rogue AgentSelf-Modification, Session Persistence
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Session Persistence

Medium
Category
Rogue Agent
Confidence
81% confidence
Finding

The skill is designed around a logged-in external account and explicitly states that the token persists in ~/.openfun/config.json, creating session persistence risk on shared or multi-tenant environments. If an agent or another local user can access that file, they may be able to reuse the session to consume credits, access account information, or perform actions on behalf of the authenticated user.

Content

Scanner excerpt · SKILL.md (reported line 3)May include surrounding context.

md
---
name: openfun
description: Create viral short-form videos using AI. Analyze trending patterns, generate original content that hits the same beats, render and download MP4s. Use when the user wants to create TikTok, YouTube Shorts, or Instagram Reels content, find trending video patterns, or automate video content creation.
metadata:
  {
    "openclaw":

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The skill's invocation description is broad enough to match many generic content-creation requests, which can cause the agent to invoke this skill in situations where the user did not explicitly consent to using an external third-party video service. In this context, overbroad routing increases the chance of unnecessary data disclosure, account usage, and unintended API actions such as trend analysis, remix generation, rendering, or downloads.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The skill omits a warning that user prompts, brand details, hooks, CTAs, trend selections, and account activity are sent to an external service, while authentication tokens persist locally in ~/.openfun/config.json. Without disclosure, users may unknowingly expose sensitive business plans, marketing content, or account-linked activity to a third party.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.