ClawHub
Back to skill

Security audit

sparky

Security checks for vulnerabilities and agentic risk

Overview

This fitness CLI skill is purpose-aligned, but users should review it carefully because it installs an unverified third-party executable and handles sensitive health data and API keys with limited privacy guidance.

Install only if you trust the SparkyFitness server and the separate CLI distribution source. Prefer a pinned, verified release installed in a user-owned bin directory, use HTTPS, understand where the API key is stored, and avoid entering sensitive health data unless you are comfortable with the server and any external food or exercise lookups.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T08 · Insecure Dependencies

Warning
Location
SKILL.md:12
Finding

Unpinned and Unverified Third-Party CLI Installation

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill handles sensitive health and biometric data and explicitly directs users to connect to a self-hosted server, while also noting fallback to third-party data providers such as Open Food Facts and Free Exercise DB. Omitting a clear warning about transmission, storage, and external lookups can mislead users into exposing personal health information without informed consent, which is a real privacy/security issue in this context.

Content

No source excerpt is available for this finding.

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 19)May include surrounding context.

git clone https://github.com/aronjanosch/sparky-cli cd sparky-cli go build -o sparky . sudo mv sparky /usr/local/bin/

text
- Pre-built binaries: https://github.com/aronjanosch/sparky-cli/releases (Linux, macOS, Windows — amd64/arm64)