ClawHub
Back to skill

Security audit

Recipe Bulk Download Folder

Security checks for vulnerabilities and agentic risk

Overview

This recipe copies files from a Google Drive folder to local storage, which matches its stated purpose and has no hidden code, persistence, or privilege escalation.

Install only if you intend to use gws/gws-drive to download Drive folder contents. Run it on folders you are authorized to access, choose a dedicated output directory, review the file list first, and watch for sensitive files or filename collisions.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill instructs users to enumerate and download all files from a Google Drive folder, including exporting documents, but provides no warning that this copies potentially sensitive cloud data onto local storage. That omission increases the risk of accidental data exfiltration, privacy violations, and overwriting or mishandling files during bulk operations, especially when used on shared or high-sensitivity folders.

Static analysis

No suspicious patterns detected.