ClawHub
Back to skill

Security audit

Contracts

Security checks for vulnerabilities and agentic risk

Overview

This skill coherently helps manage contracts locally, but users should be careful because it stores sensitive contract metadata and may create calendar entries.

Install only if you want contracts and extracted metadata stored under ~/contracts. Keep that folder private, review any generated meta.md files for sensitive data, and do not enable calendar sync or file links unless the calendar is private and you are comfortable exposing deadline metadata there. Treat any risk scores or legal conclusions as out of scope and consult a qualified attorney for interpretation or advice.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The skill recommends exporting critical deadlines to a calendar app and linking contract files from calendar events without warning that calendar platforms may expose sensitive contract metadata to third parties, shared calendars, mobile notifications, or external integrations. In a contracts workflow, even titles, counterparties, renewal dates, payment dates, and file links can reveal confidential business or legal information.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The skill directs automatic extraction of detailed contract metadata into meta.md, including parties, signatures, dates, payment terms, liability, IP, and confidentiality terms, without any indication of user consent, minimization, or sensitivity warning. In a contract-management context, this can expose confidential legal and commercial information to broader indexing, syncing, or downstream agent access than the user expects.

Content

No source excerpt is available for this finding.

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
80% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · security.md (reported line 23)May include surrounding context.

md
### File Permissions

- Contracts folder: `chmod 700` (owner-only access)
- Individual files: inherit from folder
- Backups: warn if unencrypted backup detected

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

The skill instructs the agent to automatically create folders, save files, update metadata, modify the index, and set alerts when a user shares a contract, but it does not clearly warn that local files under ~/contracts will be created and changed. This creates a consent and integrity risk: users may not realize that uploading a document triggers persistent local writes and additional derived data generation beyond simple analysis.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.