ClawHub
Back to skill

Security audit

Gitlab Work Stats

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed GitLab work-statistics reporter, but it asks agents to use high-impact SSH and database access with inconsistent sudo and repository-access guidance.

Review before installing. Use this only for a GitLab server you administer or are authorized to audit, prefer a dedicated read-only database/API account, avoid storing real credentials in the skill folder, verify host keys instead of auto-accepting them, and check every generated SQL or git command before execution.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Context-Inappropriate Capability

Medium
Confidence
92% confidence
Finding
The guide includes direct shell and repository path access instructions using `sudo -u git` and filesystem paths, which expands the skill from GitLab work-statistics reporting into host-level repository access. Even if framed as read-only, this increases attack surface, bypasses intended application/API boundaries, and could enable broader data access than needed for the stated purpose.

Context-Inappropriate Capability

Low
Confidence
88% confidence
Finding
The documentation enumerates sensitive fields in the `users` table such as email, admin status, last sign-in time, and current sign-in IP, which are not necessary for generating work-statistics reports. Exposing these fields in a reference guide can encourage overcollection of account data and lead to privacy or security-sensitive disclosures if the skill queries beyond its legitimate scope.

Sudo/Root Execution

Medium
Category
Privilege Escalation
Content
import shlex

def pg_query(ssh, sql):
    # 使用参数化命令，避免 sudo 链式执行
    cmd = '/opt/gitlab/embedded/bin/psql ' \
          '-h /var/opt/gitlab/postgresql ' \
          '-d gitlabhq_production ' \
Confidence
89% confidence
Finding
sudo

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.