ClawHub
Back to skill

Security audit

Ad Video Creator Skill

Security checks for vulnerabilities and agentic risk

Overview

This is a simple ad-video creation guidance skill with no embedded code or hidden runtime behavior; its main risk is an unpinned installer command in the README.

Before installing, consider using a trusted or pinned ClawHub installer version and a normal restricted development environment. The skill itself is content-focused, but the documented `npx` install command depends on whatever package version your npm registry resolves at install time.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T08 · Insecure Dependencies

Warning
Location
README.md:5
Finding

Unpinned npm Package Execution Through npx

Content
View full analysis
Remediation
View remediation
install ad-video-creator ``` 2. Verify the selected release against an expected integrity digest or trusted provenance record before execution. 3. Document the approved package registry and prevent fallback to untrusted or user-controlled registries. 4. Use a committed package manifest and lockfile where practical so dependency resolution is reproducible. 5. Review the package entry point, transitive dependencies, and lifecycle scripts before recommending the command. 6. Disable dependency lifecycle scripts during installation where compatible with the tool, and run the package in a restricted environment with minimal filesystem, credential, and network access. 7. Consider distributing a reviewed, checksummed binary or vendored implementation rather than dynamically executing the latest registry-resolved package. ]]>

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Rp1

Medium
Category
MCP Rug Pull
Confidence
95% confidence
Finding

The README instructs users to run npx clawhub install ad-video-creator without pinning a specific version, which causes execution of whatever package version is current at install time. If the referenced package, a dependency, or the publishing account is compromised, users could execute attacker-controlled code during installation, making this a real supply-chain risk.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.