ClawHub
Back to skill

Security audit

Gog Jasmine

Security checks for vulnerabilities and agentic risk

Overview

The skill is openly for Google Workspace access, but it combines broad OAuth permissions with an unpinned third-party CLI install and limited credential-safety guidance.

Install only if you trust the gog Homebrew tap and are comfortable granting Google Workspace access. Prefer a dedicated or least-privilege Google account, authorize only needed services where possible, keep OAuth client secrets and tokens out of repos/logs/shared shells, and review or pin the CLI dependency before use.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T08 · Insecure Dependencies

Warning
Location
SKILL.md:5
Finding

Unpinned Third-Party Homebrew Tap Creates a Supply-Chain Risk

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Credential Access

High
Category
Privilege Escalation
Confidence
70% confidence
Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 13)May include surrounding context.

md
Use `gog` for Gmail/Calendar/Drive/Contacts/Sheets/Docs. Requires OAuth setup.

Setup (once)
- `gog auth credentials /path/to/client_secret.json`
- `gog auth add you@gmail.com --services gmail,calendar,drive,contacts,sheets,docs`
- `gog auth list`

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
84% confidence
Finding

The skill instructs users to configure OAuth credentials and set an account environment variable, but it provides no guidance on protecting the client secret file, limiting OAuth scopes, or avoiding accidental disclosure in logs, shell history, or shared environments. Because this skill operates on highly sensitive Google Workspace data, weak credential-handling guidance increases the chance of credential exposure or over-privileged access.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.