Security audit

Clawdhub 1.0.0

Security checks for vulnerabilities and agentic risk

Overview

This skill is a small, coherent guide for using the ClawdHub CLI, with disclosed remote registry and skill install/update/publish behavior but some normal operational risks to review.

Before installing, treat this as a registry-management tool: use it only in workspaces you intend to modify, review any skill folder before publishing it, avoid forced bulk updates unless you understand the impact, and consider pinning or otherwise verifying the npm CLI package in sensitive environments.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:12
Finding: Unpinned Global npm Package Installation Creates Supply-Chain Risk
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The skill explicitly documents clawdhub login and clawdhub publish against a remote registry but does not warn that these actions authenticate to an external service and may upload local skill contents or metadata. In an agent setting, that omission can lead users or downstream automation to transmit proprietary code, secrets, or unpublished workspaces to clawdhub.com without informed consent.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.