ClawHub
Back to skill

Security audit

Skill Batch Operations

Security checks for vulnerabilities and agentic risk

Overview

This skill gives disclosed, purpose-aligned instructions for batch publishing and syncing skills, with a credential-handling caution but no hidden or automatic behavior.

Before using this skill, prepare an explicit target list, review each batch change before publishing, and use a least-privilege GitHub token stored outside logs and shell history. Rotate the token if it may have been exposed.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The skill instructs operators to use a GitHub PAT from a credential file and the REST API, but it provides no safety guidance on secure sourcing, least-privilege scoping, redaction, or avoiding exposure in logs and subprocess arguments. In a batch-operations skill that touches many repositories, weak credential-handling guidance increases the chance of accidental token disclosure or overprivileged use across multiple targets.

Static analysis

No suspicious patterns detected.