Security audit

Video Repurpose Skill

Security checks for vulnerabilities and agentic risk

Overview

This skill contains no executable payload, but it explicitly promotes making videos pass platform uniqueness checks through fingerprint changes.

Review this carefully before installing. Use it only for videos you own or have explicit rights to repurpose, and avoid any use intended to bypass platform duplicate-detection, moderation, or copyright enforcement. Prefer a pinned, trusted ClawHub CLI version and do not run install commands with administrator privileges.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: README.md:7
Finding: Unpinned Package Download and Execution via npx
Content: View full analysis
Remediation: View remediation
install video-repurpose ``` 2. Document the expected package registry and avoid relying on untrusted or ambiguous registry configuration. 3. Publish and verify package provenance, signatures, or integrity hashes where the distribution system supports them. 4. Use a lockfile or another reproducible installation mechanism when incorporating the CLI into automated workflows. 5. Review each package update before changing the pinned version, including its dependencies, lifecycle scripts, publisher provenance, and release integrity. 6. Advise users not to run the installation command with administrator or root privileges. ]]>

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Rp1

Medium

Category: MCP Rug Pull
Confidence: 95% confidence
Finding: The README instructs users to run npx clawhub install video-repurpose without pinning a specific version of the package being executed. This can cause users to fetch and run whatever version is current at install time, increasing supply-chain risk if the package is updated maliciously, compromised, or changed unexpectedly.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The usage examples are broad and lack clear boundaries on acceptable inputs, authorized content sources, or prohibited use cases. In the context of a video repurposing skill that explicitly emphasizes bypassing 'platform uniqueness checks' and 'anti-duplicate' transformations, this ambiguity increases the chance the agent will be invoked for policy-violating reposting, copyright evasion, or deceptive content transformation without sufficient safeguards.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 78% confidence
Finding: The description names platform-specific repurposing targets including Xiaohongshu and Douyin, which can imply a locale-specific output mode. Because the README does not mention any user choice or opt-in for language/locale behavior, this may conflict with the policy against forcing a specific language or locale without user consent.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.