Security audit

Leatherworking Basics

Security checks for vulnerabilities and agentic risk

Overview

The skill is a coherent leatherworking planning guide; the main caution is its disclosed but unpinned npx install command.

Install only through a trusted ClawHub path, preferably pinned or verified if that option is available. Run installation as a normal user, keep leatherworking logs and pattern files in a dedicated project folder, and treat calendar reminders or marketplace messages as opt-in actions you review before use.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:17
Finding: Unpinned Package Execution Through npx
Content: View full analysis
Remediation: View remediation
install leatherworking-basics ``` 2. Record and verify the expected package integrity or signature before execution. Where supported, distribute a lockfile or signed installation manifest containing the exact package version and integrity hash. 3. Explicitly use an approved HTTPS registry and ensure npm configuration cannot silently redirect package resolution to an untrusted source. 4. Review the selected `clawhub` package version, including lifecycle scripts and transitive dependencies, before recommending it to users. 5. Prefer installing dependencies from a lockfile with reproducible, integrity-checked resolution rather than executing a dynamically resolved package directly through `npx`. 6. Run the installation without administrative privileges and in a restricted environment that does not expose unrelated credentials or sensitive files. 7. Update both occurrences of the command in `SKILL.md` so the frontmatter installation metadata and user-facing instructions enforce the same pinned and verified dependency. ]]>

SkillSpector

Vulnerability Patterns

Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Rp1

Medium

Category: MCP Rug Pull
Confidence: 96% confidence
Finding: The skill instructs users to run npx clawhub install leatherworking-basics without pinning a specific version or integrity-verified package source. That allows whatever package is current at execution time to run arbitrary install-time code, creating a supply-chain risk if the package is compromised, typosquatted, or replaced.
Content: No source excerpt is available for this finding.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 96% confidence
Finding: Repeating the unpinned npx clawhub install leatherworking-basics command increases the chance a user will execute a mutable remote package reference. Because npx may fetch and execute code on demand, an attacker controlling or poisoning that package path could achieve arbitrary code execution on the user's system.
Content: No source excerpt is available for this finding.