ClawHub
Back to skill

Security audit

Eternal Network Diag

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward network diagnostic helper with expected outbound checks and no hidden data access or persistence.

Install if you need a local network diagnostic tool. It will make network requests to the host you provide and display tool output in your terminal, so use it only where you have permission to test network connectivity.

SkillSpector

Vulnerability Patterns
  • Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Unvalidated Output Injection

High
Category
Output Handling
Content
print(f"🗺️  Traceroute to {host}...\n")

    try:
        result = subprocess.run(
            ["traceroute", "-m", "15", "-w", "2", host],
            capture_output=True, text=True, timeout=30
        )
Confidence
70% confidence
Finding
The function captures stdout from traceroute to a user-supplied destination and prints it directly to the terminal. If the external tool echoes attacker-controlled content or terminal escape sequences derived from DNS names or crafted input, this can enable terminal control-sequence injection, log spoofing, or misleading operator output.

Static analysis

No suspicious patterns detected.