ClawHub
Back to skill

Security audit

exo-suite-linkage

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed workflow guide for connecting research tools, with ordinary installation and file/CLI use risks but no hidden or destructive behavior found.

Before installing, pin exact versions for hfpclawer and expflow-pde if reproducibility matters, review the third-party packages you install, and run the tools in a project workspace where generated files and network use are expected.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Rp1

Medium
Category
MCP Rug Pull
Confidence
91% confidence
Finding
The skill instructs users to execute `uvx hfpclawer --help` without pinning a version or immutable source, so the command resolves whatever package/version is current at execution time. In a skill with shell and network permissions, this creates a supply-chain risk: a future malicious or compromised release could be fetched and run unexpectedly, breaking reproducibility and potentially executing attacker-controlled code.

Rp1

Medium
Category
MCP Rug Pull
Confidence
93% confidence
Finding
`uvx --from expflow-pde expflow --help` references the package source without a pinned version, allowing execution of whatever release is latest at runtime. Because the skill explicitly chains CLI tools and encourages shell/network use, an upstream package compromise or breaking update could alter behavior or execute malicious code during installation or invocation.

Excessive Permissions

Low
Category
Privilege Escalation
Content
tags: [ai-for-science, formal-verification, literature, hpo, workflow]
author: Li Shen
version: 1.0.2
permissions: [shell, file_read, file_write, network]
metadata:
  hermes:
    homepage: https://github.com/diamond2nv/omega-architect
Confidence
60% confidence
Finding
Skill requests more permissions than appear necessary for its stated functionality. Review if elevated access is justified.

Static analysis

No suspicious patterns detected.