ClawHub
Back to skill

Security audit

luban-cli skill

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward Luban MLOps CLI guide and scaffold; its resource create, delete, and scale commands are disclosed and purpose-aligned, though users should treat them carefully.

Before installing or using this skill to build a real Luban CLI, make sure destructive and production-impacting commands require clear target identifiers, confirmations or force flags, dry-run where practical, and documentation about billing and service availability impact.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The documentation instructs implementers to support full CRUD lifecycle operations, including delete, without warning that deletion may permanently remove environments, jobs, services, logs, or associated state. In an MLOps CLI, destructive commands can affect shared infrastructure and active workloads, so omission of deletion safeguards increases the chance of accidental irreversible loss.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill explicitly documents service and infrastructure creation and scaling commands, but provides no warning that these actions can change running systems, incur cloud or compute costs, or affect production availability. In an MLOps context, users may copy these commands directly, making unguarded deployment guidance more dangerous because it can lead to unintended service changes or resource consumption.

Missing User Warnings

Low
Confidence
91% confidence
Finding
The guide lists `delete` operations for environments, training jobs, and services, but provides no warning that these actions may remove resources or disrupt running systems. In markdown files, omission of warnings about behaviors that could affect user data or system integrity should be flagged.

Static analysis

No suspicious patterns detected.