ClawHub
Back to skill

Security audit

Touch Tool

Security checks for vulnerabilities and agentic risk

Overview

This is a simple file-creation helper with a documentation mismatch, and I found no hidden, destructive, or data-stealing behavior.

Install only if you are comfortable with a helper that can create files at paths it is asked to touch. Treat it as a minimal file-creation tool unless the publisher fixes the timestamp flags and timestamp-update behavior.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Tp4

High
Category
MCP Tool Poisoning
Confidence
97% confidence
Finding

The code is narrowly a file-creation utility: opening files in append mode will create missing files, but the implementation does not perform a standard touch operation that updates modification/access timestamps on existing files. Since the declared description explicitly includes updating file timestamps as a core purpose, the implementation only partially matches and omits that stated capability. No additional undeclared risky capabilities are present.

Content

No source excerpt is available for this finding.

Undeclared Tool Scope

Medium
Category
MCP Least Privilege
Confidence
95% confidence
Finding

The skill describes file-creation behavior that implies write access, but it does not declare any explicit tool scope such as permissions or allowed-tools. This is dangerous because file-writing capabilities without clear scope constraints can enable unintended or overly broad filesystem modification if the runtime grants more access than users expect.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Low
Category
Not specified by scanner
Confidence
97% confidence
Finding

The manifest describes a touch-style tool for both creating empty files and updating file timestamps. This implementation only opens files in append mode and closes them, which creates missing files but does not modify timestamps on existing files in the way the manifest claims.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Low
Category
Not specified by scanner
Confidence
84% confidence
Finding

The inline documentation presents the tool as only creating files, while the manifest states it should also support timestamp management. This creates an intent mismatch between documentation and the declared skill purpose.

Content

No source excerpt is available for this finding.