ClawHub
Back to skill

Security audit

Cron Sentinel

Security checks for vulnerabilities and agentic risk

Overview

The only supplied concern is a command-output display risk that appears aligned with a command monitoring skill, not evidence of malicious behavior.

Install only if you intend the skill to run commands you choose and record recent command output locally. Avoid wrapping untrusted commands unless the publisher adds output sanitization or you review logs in a safe viewer.

SkillSpector

Vulnerability Patterns
  • Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Unvalidated Output Injection

High
Category
Output Handling
Content
exit_code, tail = 1, ""
    for attempt in range(1, attempts + 1):
        try:
            proc = subprocess.run(
                args.command,
                capture_output=True,
                text=True,
Confidence
85% confidence
Finding
The tool captures stdout/stderr from the wrapped command and re-emits it directly to the terminal, while also storing output tails in the state file and printing them later. If the wrapped command emits terminal control sequences or maliciously crafted text, this can cause terminal escape injection/log poisoning, misleading operators, hiding output, or triggering unsafe behavior in some terminals and downstream log viewers.

Static analysis

No suspicious patterns detected.