Security audit

KleinClaw

Security checks for vulnerabilities and agentic risk

Overview

KleinClaw is a disclosed marketplace-listing automation plugin with real account-changing power, but its artifacts are coherent, scoped, and gated by approvals and confirmations.

Install only if you want an agent to help manage real Kleinanzeigen listings. Keep approvalMode at all, keep adRoots narrow, review every approval prompt carefully, and do not paste credentials, cookies, browser profiles, or full config files into chat.

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

Detected: suspicious.dangerous_exec, suspicious.env_credential_access

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: miniclaw/dist/browser/cdp-adapter.js:849
Evidence: const child = spawn(plan.browserExecutablePath, args, {

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: miniclaw/dist/browser/chrome-diagnostics.js:30
Evidence: const match = /(\d+)\.\d+\.\d+\.\d+/.exec(versionString);

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: miniclaw/src/browser/cdp-adapter.ts:1023
Evidence: const child = spawn(plan.browserExecutablePath, args, {

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: miniclaw/src/browser/chrome-diagnostics.ts:63
Evidence: const match = /(\d+)\.\d+\.\d+\.\d+/.exec(versionString);

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: miniclaw/dist/browser/cdp-adapter.js:851
Evidence: env: { ...process.env, ...plan.environment },

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: miniclaw/src/browser/cdp-adapter.ts:1025
Evidence: env: { ...process.env, ...plan.environment },