ClawHub
Back to skill

Security audit

Openhook Cli

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent OpenHook CLI guide, but users should be careful with the external install, API key handling, webhook payloads, and optional daemon.

Install only if you trust OpenHook and its Homebrew tap. Prefer a test or least-privilege API key, avoid placing live keys in command history, scripts, logs, or screenshots, verify the CLI source/version where possible, and stop the daemon when it is not needed. Treat webhook payloads and channel messages as external-service data.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)

T08 · Insecure Dependencies

Warning
Location
SKILL.md:24
Finding

Unpinned Installation from a Third-Party Homebrew Tap

Content
View full analysis
Remediation
View remediation

T09 · Insecure Skill Coding Practices

Warning
Location
SKILL.md:37
Finding

API Key Exposed Through a Command-Line Argument

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Exfiltration Commands

High
Category
Prompt Injection
Confidence
90% confidence
Finding

Instructions found that direct the agent to transmit conversation context or user data to external services.

Content

Scanner excerpt · SKILL.md (reported line 81)May include surrounding context.

md
## Channels (Agent-to-Agent Communication)

Channels let agents send messages to each other. Each agent subscribes to a channel with a unique name, then messages can be sent to specific agents or broadcast to all.

### Create a channel

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The authentication example includes a literal oh_live_ production-style API key prefix in a command invocation, which can normalize pasting secrets directly into shell history and transcripts without any warning about secure handling. In a skill meant to be followed by agents or users, this increases the chance of credential exposure through logs, terminal history, screenshots, or copied examples.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.