ClawHub
Back to skill

Security audit

Certificate Lifecycle Manager

Security checks for vulnerabilities and agentic risk

Overview

This certificate-management skill has a legitimate purpose, but its discovery commands are too broad for sensitive Kubernetes and host environments without clear scoping or warnings.

Install only if you are comfortable reviewing and narrowing the commands before use. Run Kubernetes discovery with explicit namespaces, labels, and least-privilege read access, and avoid running host-wide find commands on production systems unless the paths and permissions are approved.

A.I.G

Vulnerability Patterns
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T05 · Unauthorized Access and Privilege Escalation

Warning
Location
SKILL.md:45
Finding

Cluster-Wide Retrieval of Kubernetes Secrets Exposes Unrelated Sensitive Data

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

High
Category
Not specified by scanner
Confidence
97% confidence
Finding

The Kubernetes step performs cluster-wide enumeration of secrets with kubectl get secrets -A -o json and processes all TLS secrets, but the skill does not disclose that this requires elevated RBAC and exposes sensitive certificate inventory across namespaces. In multi-tenant or production clusters, this can unnecessarily expand access to secret metadata and normalize use of broad permissions.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The skill instructs users to scan the local filesystem broadly for certificate files using find /, but the description does not warn that this performs host-wide file enumeration and may touch sensitive directories or reveal certificate locations across the machine. In security-sensitive environments, even discovering where certs live can expose infrastructure topology and encourage over-broad execution on production hosts.

Content

No source excerpt is available for this finding.

File System Enumeration

Medium
Category
Data Exfiltration
Confidence
90% confidence
Finding

This is a real file-system enumeration behavior: find / -maxdepth 5 walks much of the host to identify certificate files. While the operational goal is legitimate certificate discovery, the technique is still dangerous because it can reveal sensitive file locations, increase blast radius if run on the wrong host, and create unnecessary access patterns on systems containing private infrastructure material.

Content

Scanner excerpt · SKILL.md (reported line 63)May include surrounding context.

bash
# Find certificate files
find / -maxdepth 5 \( -name "*.pem" -o -name "*.crt" -o -name "*.cert" -o -name "*.cer" \) \
  -not -path "*/proc/*" -not -path "*/sys/*" 2>/dev/null | while read cert; do
  info=$(openssl x509 -in "$cert" -noout -subject -enddate 2>/dev/null)
  if [ -n "$info" ]; then

Static analysis

No suspicious patterns detected.