Security audit

LYGO Mesh Deploy

Security checks for vulnerabilities and agentic risk

Overview

The skill’s purpose is coherent, but it asks users to run unpinned remote code and an unpinned installer, which should be reviewed before use.

Review or pin the exact GitHub commit and the exact clawhub package version before installing or running this skill. Run the mesh scripts in a least-privileged, isolated environment, and only expose public network services after explicit operator review.

A.I.G

Vulnerability Patterns

Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (2)

T03 · Remote Payload Retrieval and Execution

Error

Location: SKILL.md:19
Finding: Execution of Mutable Code Retrieved from a Remote Repository
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Warning

Location: SKILL.md:54
Finding: Unpinned npm CLI Execution Using the Latest Published Version
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Ae4

Medium

Category: analysis-evasion
Confidence: 80% confidence
Finding: Suspicious Unicode normalization or mixed-script content
Content: No source excerpt is available for this finding.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 95% confidence
Finding: Using npx clawhub@latest install ... executes the latest published package version at install time, which makes the supply chain mutable and non-reproducible. If the upstream package is compromised, typosquatted, or publishes a malicious update, operators running this command could execute attacker-controlled code on their system.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.