ClawHub
Back to skill

Security audit

Kenerate AI Creative Workflow

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly coherent and text-focused, but its optional setup persists an unpinned GitHub-based MCP server that could run different local code later.

Use the text-only workflow freely, but treat the optional MCP setup as Review-worthy: inspect the referenced repository, prefer a pinned commit or released package, and only add the MCP server if you are comfortable letting that code run locally and remain configured in OpenClaw.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Rp1

Medium
Category
MCP Rug Pull
Confidence
96% confidence
Finding

The skill instructs users to install and run an MCP server directly from a GitHub repository via npx -y github:... without pinning to a specific commit, tag, or package version. This creates a supply-chain risk: the referenced repository can change over time, causing future executions to run different code than was originally reviewed, potentially leading to arbitrary code execution on the user's machine during MCP setup.

Content

No source excerpt is available for this finding.

Skill Enumeration

Medium
Category
Agent Snooping
Confidence
80% confidence
Finding

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Content

Scanner excerpt · SKILL.md (reported line 68)May include surrounding context.

md
- Pricing: https://kenerateai.org/pricing
- Privacy: https://kenerateai.org/privacy-policy
- Terms: https://kenerateai.org/terms-of-service
- Raw Skill: https://kenerateai.org/skills/kenerateai-creative-workflow/SKILL.md
- MCP source: https://github.com/gpt-img-2/kenerateai-creative-workflow-mcp
- ClawHub listing: https://clawhub.ai/gpt-img-2/skills/kenerateai-creative-workflow

Static analysis

No suspicious patterns detected.