ClawHub
Back to skill

Security audit

Gitea

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward Gitea command-reference skill, but it can guide powerful repository actions that users should confirm carefully.

Before installing, make sure you trust the local tea CLI and use a least-privileged Gitea account or token. Double-check the target instance and repository before mutating operations, and require deliberate confirmation for deleting repositories, changing secrets, publishing releases, or creating webhooks.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
87% confidence
Finding
The skill includes a forceful repository deletion command without any caution, confirmation guidance, or indication that it is irreversible. In an agent setting, this increases the chance of accidental destructive actions against real repositories, especially if a user copies or invokes the example without fully understanding the consequences.

Missing User Warnings

Medium
Confidence
84% confidence
Finding
The skill documents creating and listing action secrets without warning that these values are sensitive credentials that must not be exposed in prompts, logs, shell history, or command output. In an agent-assisted environment, this can lead to mishandling of secrets or encouraging users to paste credentials into insecure contexts.

Missing User Warnings

Medium
Confidence
82% confidence
Finding
The webhook creation example sends repository events to an external URL but provides no warning that this can exfiltrate repository metadata and event contents to third-party endpoints. In practice, users may configure untrusted or mistyped destinations, creating data leakage or supply-chain monitoring risks.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.