ClawHub
Back to skill

Security audit

Legionspace Version

Security checks for vulnerabilities and agentic risk

Overview

This skill appears intended to check public app-store versions, but it installs runtime dependencies, forces direct network connections, and weakens Chromium sandboxing in ways users should review first.

Install only if you are comfortable with a skill that can run Bash, install Python/browser dependencies, contact several external app-store sites, force direct network access, and run Chromium with reduced sandboxing. Prefer running it in a constrained environment and review or remove the proxy-bypass and --no-sandbox settings before use.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Context-Inappropriate Capability

Medium
Confidence
92% confidence
Finding
The skill performs runtime installation of Python packages and a Chromium browser, which expands its execution and supply-chain footprint well beyond a simple version lookup. Installing code at execution time can introduce unreviewed dependencies, network-side effects, and environment modification in contexts that expect a read-only query skill.

Context-Inappropriate Capability

Medium
Confidence
97% confidence
Finding
The script forcibly clears proxy settings and disables environment-driven proxy use for both requests and browser traffic. This can bypass enterprise monitoring, egress controls, DLP, logging, or routing policies, which is not necessary for the stated purpose of checking public app versions.

Context-Inappropriate Capability

Medium
Confidence
90% confidence
Finding
Launching Chromium with --no-sandbox weakens a core browser isolation boundary and increases the impact of any malicious or compromised web content loaded during scraping. For a skill that visits multiple external sites, disabling sandboxing is unnecessarily risky and not justified by simple version retrieval.

Static analysis

No suspicious patterns detected.