ClawHub
Back to skill

Security audit

Gateway Restore

Security checks for vulnerabilities and agentic risk

Overview

The skill has a legitimate rollback purpose, but it can overwrite live gateway configuration and restart services from broad user phrases without enough confirmation or scoping.

Install only if you operate the target gateway host and are comfortable with a skill that can replace live Slack or Discord gateway config and restart services. Review the local restart scripts first, use explicit target names, and add a confirmation step before natural-language restores in production.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
91% confidence
Finding
The skill authorizes destructive rollback behavior from loosely defined natural-language phrases like "restore" or "rollback," which increases the chance of accidental invocation or ambiguous intent being mapped to a live configuration overwrite. Because the action launches a detached restore script that changes gateway state, broad trigger mapping materially raises the risk of unintended service disruption or unauthorized rollback from casual or malformed user input.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The skill description explains rollback mechanics but does not clearly warn that it overwrites the live configuration and may restart the gateway in a detached background process. In a user-invocable skill, missing safety warnings and consent cues can cause operators to trigger disruptive changes without understanding that the current config will be replaced and service may restart immediately.

Static analysis

No suspicious patterns detected.