ClawHub
Back to skill

Security audit

Osop

Security checks for vulnerabilities and agentic risk

Overview

The skill is a coherent OSOP workflow helper with disclosed local logging and visualization features, but users should treat generated logs and external viewers as potentially sensitive.

Before installing or using this skill, review generated .osop and .osoplog.yaml files for secrets, internal paths, incident details, and infrastructure information. Do not upload workflow or log files to external visualization services unless the contents are sanitized and approved for sharing.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The skill explicitly encourages generating structured execution logs after multi-step tasks but does not warn that logs may capture prompts, commands, file paths, outputs, errors, secrets, or other sensitive operational context. In a workflow/automation skill, those records are likely to contain exactly the kinds of data that should be minimized or redacted, so omission of privacy guidance creates a real risk of inadvertent sensitive data retention and sharing.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
84% confidence
Finding

The skill directs users to visualize generated workflow and log files at an external site without any privacy or data-handling warning. Because workflow definitions and execution logs can include infrastructure details, process logic, credentials references, or incident data, encouraging external upload/viewing increases the chance of unintentional disclosure to third-party services.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.