Social Video Analytics Skill

• Outcome: Review
• Latest audit: Sep 15, 2026 · 1:42 AM UTC
• Version: 1.0.1

Overview

The skill itself is a simple analytics prompt package, but its README recommends an unpinned npx install command that can execute whatever installer version is current at install time.

Review the install path before using this skill. Prefer a pinned and trusted clawhub installer version or an isolated environment, and provide only the social analytics data needed for the specific report or comparison you request.

A.I.G

Vulnerability Patterns

• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

• Location: README.md:6

Finding

Unpinned npm Package Execution in Installation Instructions

Content

View full analysis

Vulnerability Details

File Location: README.md, lines 6–8
Vulnerability Type: Unpinned third-party package execution
Risk Level: Medium

Complete Code Snippet:

bash

## Install
```bash
npx clawhub install social-video-analytics

text

### Technical Analysis

The installation instructions invoke `clawhub` through `npx` without specifying an exact package version or verifying package integrity. If the package is not already available locally, `npx` can retrieve it from the configured npm registry and execute its command-line entry point.

Consequently, the code executed during installation is not fixed to the version that was reviewed. A compromised maintainer account, malicious package release, registry compromise, or unexpected future update could cause the command to execute attacker-controlled package lifecycle scripts or command-line code. The reviewed artifact contains no lockfile, checksum, signature-verification procedure, or vendored installer implementation that would constrain the retrieved code.

### Attack Path

1. An attacker compromises the npm package, its publisher account, or the dependency publication process.
2. The attacker publishes a malicious version that can be selected by the unversioned `npx clawhub` invocation.
3. A user follows the documented installation command.
4. `npx` resolves and downloads the attacker-controlled release from the configured registry.
5. Package lifecycle logic or the `clawhub` executable runs with the privileges of the user executing the command.
6. The malicious code can access resources available to that user and may alter files, steal credentials, or install additional payloads.

### Impact Assessment

Successful exploitation permits arbitrary code execution with the privileges of the user running the installation command. The potential scope includes the user's files, environment variables, developer credentials, accessible repositories, ne
...[truncated 285 chars]

Remediation

View remediation

Remediation Suggestions

• Pin clawhub to a reviewed exact version, for example npx clawhub@X.Y.Z install social-video-analytics, rather than allowing automatic selection of the latest release.
• Document the expected npm registry and verified publisher identity.
• Provide an integrity hash or cryptographic signature and require verification before execution.
• Prefer a lockfile-backed, reproducible installation workflow where practical.
• Review the pinned package, its lifecycle scripts, and its complete dependency tree before recommending execution.
• Use a least-privileged account or isolated environment for installation, and avoid running the command as root or with unnecessary secrets present.
• Establish a controlled update process in which new package versions are audited before the documented version is changed.

SkillSpector

Vulnerability Patterns

• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 92% confidence

Finding

The README instructs users to execute npx clawhub install social-video-analytics without pinning a specific version, which can cause users to fetch and run whatever version is current at execution time. If the package, a dependency, or the distribution path is compromised later, users may execute unreviewed code, making this a real supply-chain risk.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.