ClawHub
Back to skill

Security audit

个人工作台搭建器

Security checks for vulnerabilities and agentic risk

Overview

The skill’s workbench-building purpose is mostly coherent, but its generated app can sync personal work, finance, and image data to CloudBase with weakly scoped anonymous access and incomplete privacy controls.

Review before installing. Use the skill only for data you are comfortable putting into a generated hosted PWA. Enable CloudBase sync only if you understand the CloudBase environment, database rules, and anonymous-login setup; avoid storing sensitive finance, account, student/client, or confidential work data unless you harden the sync rules and verify what is uploaded, especially photos.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
86% confidence
Finding
The skill instructs the agent to deploy to CloudStudio, use CloudBase SDKs, and handle sync/auth-related functionality, which implies network and environment access even though no permissions are declared. This creates a transparency and consent problem: users and platform operators cannot accurately assess what capabilities the skill will use before execution.

Tp4

High
Category
MCP Tool Poisoning
Confidence
92% confidence
Finding
The skill claims to build and deploy a personalized PWA, but the documented behavior extends into authentication, database access, local persistence, and service-worker-based offline caching. Those added capabilities materially change the data-handling and trust model, because the generated app may store personal/work data locally and transmit it to CloudBase without a clear upfront disclosure in the primary description.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill collects personally identifying and behavioral information such as name, profession, motto, phone brand/model, workflow habits, and may later deploy content and enable cloud sync, but the description does not clearly warn users that this information may be stored, embedded in generated files, or transmitted to external platforms. In this context, the omission is more dangerous because the workflow explicitly combines personal profiling with deployment and optional cloud-backed synchronization.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
This bundled SDK stores authentication/session material and user profile data in local storage by default, which is accessible to any JavaScript executing in the same origin. In a PWA/workbench context that may handle personal task, schedule, finance, and account data, an XSS or compromised third-party script could extract tokens and cached user information, enabling session hijacking or privacy loss.

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
assets/template/cloudbase-sdk.js:8146