ClawHub
Back to skill

Security audit

Sui Decompile

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly a straightforward Sui contract source-fetching guide, but its server automation instructions weaken Chromium sandboxing on remote web content without adequate warning or containment guidance.

Review before installing if you plan to use the Puppeteer/server workflow. Prefer a sandboxed browser configuration, run automation as an unprivileged user in an isolated disposable environment, and avoid running it on CI or servers that contain secrets. The simple browser-based source lookup workflow is much lower risk.

A.I.G

Vulnerability Patterns
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T09 · Insecure Skill Coding Practices

Warning
Location
SKILL.md:105
Finding

Chromium Sandbox Disabled in Puppeteer Configuration

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
95% confidence
Finding

The documentation explicitly instructs use of sudo to install packages and later recommends launching Chromium/Puppeteer with --no-sandbox and --disable-setuid-sandbox. In context, this normalizes privileged system modification and weakened browser isolation for scraping untrusted web content, which increases the blast radius if the browser or scraper is compromised.

Content

Scanner excerpt · SKILL.md (reported line 95)May include surrounding context.

bash
# Install xvfb (virtual framebuffer)
sudo apt-get install xvfb

# Run with virtual display (avoids headless detection)
xvfb-run --auto-servernum node scraper.js

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
82% confidence
Finding

This markdown file includes an instruction to 'Save to separate .move files' but does not provide any caution about where files should be written or avoiding overwriting existing files. For markdown files, SQP-2 applies when descriptions omit warnings about behaviors that could affect user data or system integrity, and file creation/modification is such a behavior.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.