ClawHub
Back to skill

Security audit

Clone master

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward GitHub clone and sync guidance skill; it discusses normal Git authentication and local file effects without hidden execution or persistence.

Before installing, users should understand that this skill helps an agent run or suggest Git commands that create, update, or potentially replace local repository directories. Use trusted repository URLs, avoid sharing private keys or tokens, and confirm before deleting folders or changing global Git proxy/certificate settings.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Credential Access

High
Category
Privilege Escalation
Confidence
70% confidence
Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 16)May include surrounding context.

md
- **Git 安装检查：** 运行 `git --version`。如果未安装，需引导用户前往 Git 官网或包管理器进行安装。
- **身份认证配置：** 这是克隆私有仓库或进行推送的前提。
    - **SSH 方式（推荐）：** 指导生成 SSH 密钥 (`ssh-keygen`) 并添加到 GitHub 账户。使用 `git@github.com:username/repo.git` 格式。
    - **HTTPS 方式：** 使用 `https://github.com/username/repo.git` 格式。需提醒用户配置凭据管理器或使用 Personal Access Token (PAT) 代替密码。

#### 2. 基础克隆操作

Credential Access

High
Category
Privilege Escalation
Confidence
90% confidence
Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 51)May include surrounding context.

md
#### "Permission denied (publickey)"

- **诊断：** 本地没有配置 SSH 密钥，或者公钥未添加到 GitHub 账户。
- **解决：** 运行 `cat ~/.ssh/id_rsa.pub` 查看公钥。如果没有，生成一个新的。将公钥内容复制到 GitHub 的 "SSH and GPG keys" 设置中。

#### "fatal: destination path '...' already exists and is not an empty directory"

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
81% confidence
Finding

The entire skill is presented in Chinese and does not indicate that language selection is configurable or that the Chinese-only presentation is an intentional, justified locale constraint. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

This markdown skill describes cloning and troubleshooting steps that affect the user's local files, including creating a new directory during clone and suggesting deletion of an existing folder later in the document. The description explains what commands do, but it does not clearly warn users about local filesystem changes or advise caution before deleting or overwriting directories.

Content

No source excerpt is available for this finding.