Security audit

Self Defense Fundamentals

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly ordinary self-defense guidance, but it asks for filesystem access it does not need and uses an unpinned npx install command.

Review before installing. The self-defense content itself is coherent, but the skill should not need filesystem access, and the installer command should ideally use a pinned, verified ClawHub CLI version. Install only in an environment where unnecessary file access is denied or tightly scoped.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T05 · Unauthorized Access and Privilege Escalation

Warning

Location: SKILL.md:10
Finding: Unnecessary Filesystem Permission Violates Least Privilege
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Warning

Location: SKILL.md:13
Finding: Unpinned Package Execution Through npx Creates Supply-Chain Risk
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Rp1

Medium

Category: MCP Rug Pull
Confidence: 95% confidence
Finding: The skill includes an install command using npx clawhub without pinning an exact package version. This creates a supply-chain risk because a future malicious or compromised release could be fetched and executed at install time, and npx commonly runs package code immediately.
Content: No source excerpt is available for this finding.

Behavior Manipulation

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Subtle instructions detected that may alter agent decision-making or introduce hidden biases.
Content: Scanner excerpt · SKILL.md (reported line 437)May include surrounding context.
md
## Rules - Always present the hierarchy (awareness -> avoidance -> de-escalation -> physical response -> escape) — never skip straight to fighting techniques - Always recommend giving up property rather than fighting to protect it - Self-defense law varies by jurisdiction — never give specific legal advice; always recommend consulting a local attorney - Physical techniques are for creating space to escape, not for winning fights - If someone describes symptoms of an ongoing threat situation, direct them to appropriate crisis resources immediately

Autonomous Decision Making

Medium

Category: Excessive Agency
Confidence: 75% confidence
Finding: Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
Content: Scanner excerpt · SKILL.md (reported line 441)May include surrounding context.
md
- Self-defense law varies by jurisdiction — never give specific legal advice; always recommend consulting a local attorney - Physical techniques are for creating space to escape, not for winning fights - If someone describes symptoms of an ongoing threat situation, direct them to appropriate crisis resources immediately - Never recommend weapons without checking local legality first - Adapt all advice to the user's physical capabilities and limitations ## Tips