Security audit

Crimson DevLog

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed local developer-journal helper, but its installer pulls an unpinned third-party CLI from PyPI.

Before installing, consider that setup.sh may download current PyPI packages and adjust your PATH. Use it in a least-privileged environment, review or pin dev-log-cli if supply-chain control matters, and avoid logging secrets or sensitive customer data into the journal.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: setup.sh:10
Finding: Unpinned Third-Party Packages Are Automatically Downloaded and Installed
Content: View full analysis
/dev/null then echo "pipx not found. Attempting to install pipx..." python3 -m pip install --user pipx python3 -m pipx ensurepath --force export PATH="$PATH:$HOME/.local/bin" if ! command -v pipx &> /dev/null then echo "Error: Failed to install pipx automatically." echo "Please install it manually: https://github.com/pypa/pipx#install-pipx" exit 1 fi fi echo "Installing dev-log-cli via pipx..." pipx install dev-log-cli ``` ### Technical Analysis The setup script automatically downloads and installs `pipx` and `dev-log-cli` without pinning reviewed versions or verifying package integrity with hashes or signatures. Consequently, the effective code executed during installation and by the resulting `devlog` command can change after this skill has been reviewed. Python package installation can execute package build hooks and other package-controlled installation logic. The implementation of `dev-log-cli` is not included in this project, so its behavior cannot be established from the audited files. This does not demonstrate that either current package is malicious, but it creates a supply-chain trust boundary through which a compromised or unexpectedly modified release could introduce arbitrary code. The command `python3 -m pipx ensurepath --force` can also modify the user's shell PATH configuration. This is installation-related behavior rather than evidence of a backdoor, but it increases the persistence and exposure of executables installed through the unverified dependency channel. ### Attack Path 1. An attacker compromises the package publisher account, package repository, release process, or another component of the dependency su ...[truncated 1276 chars]
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Context Leakage

High

Category: Data Exfiltration
Confidence: 75% confidence
Finding: Code or instructions that leak agent conversation context to external services, potentially exposing sensitive user interactions.
Content: Scanner excerpt · SKILL.md (reported line 11)May include surrounding context.
md
A standardized journaling skill for OpenClaw agents to track progress, tasks, and project status using `dev-log-cli`. ## Description This skill enables agents to maintain a professional developer log. It's designed to capture context, project milestones, and task statuses in a structured SQLite database. ## Requirements - `dev-log-cli` (installed via `pipx`)

Static analysis

No suspicious patterns detected.