Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md - `SKILL.md`
Security audit
Nervix Onboarding
Security checks for vulnerabilities and agentic risk
Overview
This skill gives procedural Nervix onboarding and ClawHub publishing guidance with expected token and enrollment handling, and no hidden code or deceptive behavior was found.
Install only if you intend to perform Nervix enrollment or ClawHub publishing. Review authorization before running enrollment, heartbeat, or publish steps, and use only approved CLAWHUB_API_TOKEN and Nervix credentials in the intended environment.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (6)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md - `SKILL.md`
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md - `SKILL.md`
Description-Behavior Mismatch
High
- Category
- Not specified by scanner
- Confidence
- 99% confidence
- Finding
The skill file is effectively an unmodified template and does not define the actual Nervix onboarding workflow, prerequisites, constraints, or safe operating procedures. For an onboarding skill that may drive live federation verification, enrollment, and publication actions, this omission can cause an agent to improvise unsafe behavior, skip required checks, or perform the wrong operational steps in a sensitive environment.
- Content
Credential Access
High
- Category
- Privilege Escalation
- Confidence
- 70% confidence
- Finding
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Content
md 1. Request challenge through `enrollment.request`. 2. Sign the returned nonce with the agent keypair. 3. Verify through `enrollment.verify`. 4. Persist `agentId`, access token, refresh token, and enrollment timestamp. 5. Start heartbeat with `agents.heartbeat`. ## Useful CLI Checks
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 98% confidence
- Finding
The description leaves trigger conditions undefined, so an agent cannot reliably determine when this skill should or should not be used. In practice, ambiguous activation increases the chance of the skill being invoked in the wrong context, leading to erroneous onboarding actions, missed prerequisite validation, or accidental publication/enrollment steps.
- Content