ClawHub
Back to skill

Security audit

quantumlab

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed local runner for a specific quantum_lab repository, with ordinary risks from running local code, starting a localhost server, and optionally installing dependencies.

Install only if you intend an agent to run commands from your local quantum_lab checkout. Confirm the exact subcommand before running notebooks, app modes, server processes, or pip install, and verify that QUANTUM_LAB_ROOT and VENV_PATH point to the repo and virtual environment you expect.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Vague Triggers

Medium
Confidence
92% confidence
Finding
The skill description is broad enough that an agent may invoke it for generic requests to run scripts or demos, increasing the chance of unnecessary or unsafe execution. Because the skill can launch arbitrary repo entrypoints, notebooks, and helper scripts, over-broad triggering can lead to unintended code execution in a local development environment.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The documentation includes commands to start a local server and run notebooks or application entrypoints without warning about side effects such as opening network listeners, consuming resources, or executing unreviewed code paths. In an agent setting, missing warnings can cause these actions to be taken automatically even though they change system state or expose services.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill instructs the agent to run `pip install -r requirements.txt`, which modifies the existing virtual environment and executes package installation logic without an explicit warning or approval gate. This can change dependencies, introduce malicious or compromised packages, and alter future behavior of the environment in ways the user did not intend.

Static analysis

No suspicious patterns detected.