ClawHub
Back to skill

Security audit

Error Rosetta

Security checks for vulnerabilities and agentic risk

Overview

This is a markdown-only debugging helper that explains errors using local code context and does not add hidden execution, network, persistence, or credential behavior.

Install this if you want an assistant to help interpret errors using nearby code context. Expect it may read files referenced by stack traces or logs during debugging, but the artifact does not request external services, persistence, credentials, or elevated access.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Sudo/Root Execution

Medium
Category
Privilege Escalation
Content
| Cryptic Error | Plain Translation | Common Fix |
|---|---|---|
| `ENOENT: no such file or directory` | File or directory doesn't exist at that path | Check the path — typo? Missing directory? Relative vs absolute? |
| `EACCES: permission denied` | You don't have permission to access this | Check file permissions, check if you need sudo/admin |
| `EADDRINUSE: address already in use` | Another process is already using that port | Kill the other process or use a different port |
| `ENOMEM: not enough memory` | System is out of memory | Check for memory leaks, increase available memory, or reduce consumption |
| `ETIMEDOUT: connection timed out` | The remote host didn't respond in time | Check network, check if the service is running, check firewall |
Confidence
50% confidence
Finding
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Vague Triggers

Medium
Confidence
95% confidence
Finding
The 'When to Invoke' section says to use the skill 'Every time you see an error you don't immediately understand,' which is a very broad activation condition without constraints or exclusion examples. Because many routine development situations fit this description, the trigger scope is ambiguous and could cause unintended or over-frequent invocation.

Static analysis

No suspicious patterns detected.