ClawHub
Back to skill

Security audit

BOC部署工具

Security checks for vulnerabilities and agentic risk

Overview

The skill appears to be a deployment helper, but it includes an unguarded destructive cleanup command that could remove deployment files if run in the wrong location.

Review this skill before installing. Only use it when you intend to operate on the target deployment host, verify the exact working directory first, and consider replacing the delete step with a backup or rename-based cleanup.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill instructs operators to delete an existing deployment directory with `rm -rf` and then proceed with upload/deployment actions, but it does not provide an explicit safety confirmation, backup guidance, path validation, or rollback instructions. In an automation context, destructive filesystem operations on a remote deployment host can cause irreversible data loss or service disruption if the path is wrong, the directory contains live data, or the action is triggered on the wrong machine.

Chaining Abuse

High
Category
Tool Misuse
Content
```bash
# 解压前先清理旧目录
cd <deploy_pkg_dir>
test -d BOC_k8s_noarch && rm -rf BOC_k8s_noarch

# 后台执行解压（30GB文件预计15-20分钟）
nohup tar -xzf <deploy_pkg_file> > /tmp/unpack.log 2>&1 &
Confidence
94% confidence
Finding
The command chain includes `test -d BOC_k8s_noarch && rm -rf BOC_k8s_noarch`, which performs irreversible deletion based on a relative path after changing directories. In a deployment skill that operates on remote hosts, chaining destructive commands without strong path verification or operator confirmation increases the chance of accidental deletion, misuse in the wrong working directory, or amplified damage if variables or context are manipulated.

Static analysis

No suspicious patterns detected.