ClawHub
Back to skill

Security audit

Uuid Tool

Security checks for vulnerabilities and agentic risk

Overview

This UUID helper is locally scoped and non-destructive, though its documentation overstates some supported UUID features.

Install only if you need a simple local UUID generator for v1, v4, or v5. Do not rely on the advertised v7, nil, parse, or JSON features unless the package is updated to implement them.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Tp4

High
Category
MCP Tool Poisoning
Confidence
99% confidence
Finding
The code generally matches the UUID-generation purpose and does support bulk generation plus namespace-based deterministic v5 UUIDs. However, the description materially overstates supported UUID types: the implementation restricts --version to 1, 4, and 5 and has no path for generating UUID v7 or a nil UUID. Because core advertised capabilities are missing from the implementation, this is a description-behavior mismatch.

Description-Behavior Mismatch

Medium
Confidence
98% confidence
Finding
The skill description says it can generate UUIDs in versions v1, v4, v5, v7, and nil format. In the implementation, generate_uuid only handles versions 1, 4, and 5, and any other version is rejected as unsupported, so the actual behavior does not match the advertised capability.

Description-Behavior Mismatch

Medium
Confidence
97% confidence
Finding
The command-line interface exposes --version choices of only [1, 4, 5], with namespace/name options only for v5. There is no CLI path for requesting v7 or nil UUIDs, which contradicts the manifest's stated feature set.

Static analysis

No suspicious patterns detected.