Security audit

Tallow Candle Making Basics

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent DIY tallow-candle guide with disclosed filesystem use for logs/templates, though users should be careful with its unpinned npx install command and fire-safety risks.

Install only from a trusted ClawHub/npm source, prefer a pinned or otherwise verified installer if available, and run it without elevated privileges. Expect the skill to use local files for batch logs and dashboards. Because the craft involves hot fat and open flame, follow the safety notes carefully and do not treat the agent as a substitute for fire-safety judgment.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:15
Finding: Unpinned Package Retrieval and Execution via npx
Content: View full analysis
Remediation: View remediation
install tallow-candle-making-basics ``` 2. Verify the package against a trusted integrity hash or signed provenance before execution. Document the expected package source, version, checksum, and publisher identity. 3. Prefer installation through a lockfile-backed workflow or an immutable, internally mirrored artifact repository. 4. Review both the direct package and its transitive dependency tree before approving a version. Repeat this review before changing the pinned version. 5. Where operationally feasible, disable npm lifecycle scripts during package acquisition and execute only the explicitly reviewed entry point. 6. Run the installer in a sandbox, container, or otherwise restricted environment with minimal filesystem access, no unnecessary credentials, and no elevated privileges. 7. Remove or replace every unpinned occurrence of the installation command so users are not directed to bypass the hardened installation procedure. ]]>

SkillSpector

Vulnerability Patterns

Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Rp1

Medium

Category: MCP Rug Pull
Confidence: 96% confidence
Finding: The skill instructs users to execute npx clawhub install tallow-candle-making-basics without pinning an exact package version or integrity reference. This allows whatever version is current at execution time to run arbitrary install-time code, creating a supply-chain risk if the package is updated maliciously, compromised, or typo-squatted.
Content: No source excerpt is available for this finding.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 96% confidence
Finding: This repeated unpinned npx clawhub install tallow-candle-making-basics command exposes users to the same remote code execution and dependency substitution risk. Because npx fetches and runs the latest matching package by default, a compromised upstream package or registry entry could execute attacker-controlled code on the user's system.
Content: No source excerpt is available for this finding.