ClawHub
Back to skill

Security audit

home-assistant-master

Security checks for vulnerabilities and agentic risk

Overview

This is a Home Assistant operations guidance skill that defaults to read-only diagnostics and requires explicit approval for changes.

Install only where the hosting platform provides a trusted Home Assistant access path and secret storage. Keep write permissions scoped, require the stated confirmations for locks, alarms, cameras, restarts, updates, restores, and bulk changes, and treat it as guidance-only unless you intentionally grant runtime access.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

YARA rule 'agent_skill_prompt_injection_hidden_instructions': Prompt injection or hidden instructions embedded in AI agent skill text [agent_skills]

High
Category
YARA Match
Confidence
80% confidence
Finding

YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Content

Scanner excerpt · SKILL.md (reported line 2)May include surrounding context.

md
---
name: home-assistant-master
description: Home Assistant OS (HAOS) operations skill for OpenClaw agents. Use for read-only audits, diagnostics, automation design/review, dashboard UX planning, voice intent mapping, integration risk assessment, backup/restore readiness checks, and maintenance playbooks. Default to read-only; require explicit approval before any write/reload/restart. Apply when users ask to troubleshoot entities/devices/integrations, improve reliability, design automations, or plan safe Home Assistant changes.
---

# Home Assistant Master

Follow a diagnostics-first, safety-first workflow f

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
80% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · references/access-and-credentials.md (reported line 12)May include surrounding context.

md
3. A platform-approved secure token flow.

## Credential handling policy
- Never ask users to paste long-lived secrets in public/group chats.
- Store credentials only in platform secret storage (never in skill files).
- Use least-privilege scopes/tokens where possible.
- Mask/redact sensitive values in output.

Static analysis

No suspicious patterns detected.