ClawHub
Back to skill

Security audit

Huckleberry

Security checks for vulnerabilities and agentic risk

Overview

The skill does what it says, but it asks users to install an unofficial unpinned CLI and may handle sensitive Huckleberry account credentials without enough security guidance.

Review this carefully before installing. Prefer interactive login or a credential manager over exported passwords, avoid putting Huckleberry credentials in shell startup files or shared scripts, install the CLI in an isolated environment such as pipx or a virtualenv, and consider pinning a reviewed package version. Do not run the install or CLI with administrator privileges.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T08 · Insecure Dependencies

Warning
Location
SKILL.md:14
Finding

Unpinned Installation of an Unverified Third-Party Package

Content
View full analysis
Remediation
View remediation
" ``` 2. Publish and verify cryptographic hashes using a locked requirements file and `pip --require-hashes`. 3. Link to the verified source repository and clearly document package ownership and provenance. 4. Review the pinned release, including its build configuration, transitive dependencies, and installation hooks. 5. Install the CLI in an isolated virtual environment or through `pipx` rather than into the system Python environment. 6. Avoid running installation or CLI commands with administrator or root privileges. 7. Use automated dependency monitoring and repeat the security review before changing the pinned version. ]]>

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill explicitly recommends placing Huckleberry email and password in plaintext environment variables, but gives no warning about the security tradeoffs. Environment variables can be exposed through shell history, process inspection, crash reports, CI logs, and inherited subprocess environments, which is especially concerning because these credentials protect a child-tracking account containing sensitive family data.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.