ClawHub
Back to skill

Security audit

Rollup Config Validator

Security checks for vulnerabilities and agentic risk

Overview

This skill is a local Rollup config checker with no hidden persistence, network access, credential handling, or destructive behavior, though users should note it only handles JSON-style config data reliably.

Install only if you understand this is a local JSON/JSONC-style Rollup config validator. For real rollup.config.js, .mjs, or .ts files, export or convert the config object to JSON first; do not rely on this skill as a complete security review of executable Rollup configuration code.

SkillSpector

Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Description-Behavior Mismatch

High
Confidence
96% confidence
Finding
The skill metadata promises validation of Rollup JS/MJS/TS config files, but the implementation only strips comments/trailing commas and then runs json.loads on the file. Real rollup.config.js/mjs/ts files commonly contain executable JavaScript/TypeScript constructs, imports, exports, functions, and plugin calls, so this tool will reject or mis-handle many valid configs and may give users a false sense that their build pipeline was validated.

Intent-Code Divergence

Medium
Confidence
90% confidence
Finding
The docstring explicitly says the validator handles Rollup configuration in JSON format, which contradicts the broader skill manifest claiming support for rollup.config.js/mjs/ts. This inconsistency increases the chance of misuse, operator confusion, and silent security review gaps because users may rely on the manifest rather than the code's actual limitations.

Static analysis

No suspicious patterns detected.