ClawHub
Back to skill

Security audit

Expert Finder

Security checks for vulnerabilities and agentic risk

Overview

This skill openly uses Xpoz and web searches to find public experts, with no hidden destructive or persistent behavior found.

Before installing, understand that this skill depends on an external npm package and an Xpoz OAuth account. Use it only if you are comfortable granting Xpoz-backed search access, and prefer a pinned or reviewed mcporter version when available.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T08 · Insecure Dependencies

Warning
Location
SKILL.md:16
Finding

Unpinned npm Dependency Permits Supply-Chain Code Execution

Content
View full analysis

Vulnerability Details

File Location: SKILL.md, line 16
Vulnerability Type: Unpinned third-party executable dependency
Risk Level: Medium

Vulnerable Code

yaml
"install": [{"id": "node", "kind": "node", "package": "mcporter", "bins": ["mcporter"], "label": "Install mcporter (npm)"}],

Technical Analysis

The installation configuration references the npm package mcporter without an exact version or integrity hash. Package names without immutable version and integrity constraints can resolve to a different artifact over time.

The Skill subsequently instructs the Agent to execute the installed mcporter binary for authentication-status checks, searches, operation polling, and profile retrieval. Consequently, a compromised or unexpectedly modified package release could run arbitrary code through npm lifecycle behavior or when the binary is invoked. The project contains no lockfile, checksum, signature requirement, or other mechanism that establishes the identity of the reviewed dependency artifact.

This finding does not establish that the current mcporter package is malicious. The vulnerability is the unsafe, mutable dependency resolution and execution model.

Attack Path

  1. An attacker compromises the package publisher, npm account, publication pipeline, or another component capable of publishing a modified mcporter release.
  2. The attacker publishes a malicious version under the expected package name.
  3. A user or Agent installs the Skill dependency without an exact version or integrity constraint.
  4. npm resolves the mutable package reference to the attacker-controlled release.
  5. Malicious code executes during package installation or when the Skill invokes the mcporter binary.
  6. The payload operates with the permissions and accessible environment of the installing or executing account.

Impact Assessment

Successful exploitation could provide arbitrary code execution wit ...[truncated 544 chars]

Remediation
View remediation

Remediation Suggestions

  1. Pin mcporter to a reviewed, exact version rather than using an unconstrained package name.
  2. Record and verify the package artifact's integrity hash through a lockfile or an equivalent immutable verification mechanism.
  3. Confirm that the configured npm registry is trusted and prevent fallback to unapproved registries or package sources.
  4. Review the selected package version, including its transitive dependencies and installation scripts, before approval.
  5. Disable npm lifecycle scripts where they are unnecessary and compatible with the package.
  6. Install and execute the dependency in a least-privilege sandbox with restricted filesystem, credential, and network access.
  7. Establish an explicit dependency-update process that requires security review before changing the pinned version or integrity value.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.