ClawHub
Back to skill

Security audit

cargo-hosting

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Cargo Hosting helper for scaffolding, deploying, promoting, and removing apps or workers, with the main operational risks explained in its documentation.

Install only if you intend to manage Cargo Hosting resources. Before running promote or remove commands, verify the app, worker, or deployment UUID and current live status, because promotion affects the public URL and removal cascades to deployments with no documented undo.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The documentation includes a destructive `app remove` command and notes that it also removes every deployment of the app, but it provides no warning, confirmation guidance, or recovery caveat. In an operational skill focused on deployment management, this increases the chance of accidental deletion of production assets and service disruption through user error.

Static analysis

No suspicious patterns detected.