ClawHub
Back to skill

Security audit

After-sales Service

Security checks for vulnerabilities and agentic risk

Overview

The skill does what it advertises, but its OKKI CRM sync can modify external business records with weak access controls and unsafe temporary code handling.

Review before using in a real business environment. Put any API routes behind authentication, limit who can trigger OKKI sync or read logs, remove the dynamic /tmp Python fallback, and ensure OKKI path environment variables are controlled by trusted operators only.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Context-Inappropriate Capability

Low
Confidence
86% confidence
Finding
Allowing executable and workspace paths to be overridden by environment variables can redirect the application to attacker-controlled Python files if the deployment environment is compromised or misconfigured. Because these paths are later executed, this becomes a code-execution primitive rather than simple configuration flexibility.

Context-Inappropriate Capability

Medium
Confidence
96% confidence
Finding
The fallback path writes executable Python code containing dynamic data into /tmp and then executes it. This creates avoidable filesystem and code-injection risk, especially on multi-user systems where /tmp is shared and the file may be exposed, raced, or modified depending on permissions and OS behavior.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The fallback logic writes customer complaint/order content into a temporary Python script on disk, which can expose sensitive CRM data to other local users, backups, crash artifacts, or forensic recovery. This increases confidentiality risk beyond the intended network transmission to OKKI because the data is unnecessarily persisted in executable form on the host.

Static analysis

Detected: suspicious.dangerous_exec

Shell command execution detected (child_process).

Critical
Code
suspicious.dangerous_exec
Location
api/controllers/okki_sync_controller.js:42