ClawHub
Back to skill

Security audit

Legacy Circuit Mockups

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly electronics documentation, but it includes optional root-level software installation and chip-writing guidance that is broader and riskier than simple circuit mockups.

Before installing, treat the minipro and T48 sections as privileged manual operations, not ordinary diagramming help. Prefer trusted package-manager installs, avoid unpinned source builds with sudo, verify any upstream release, back up chips before write or erase operations, and double-check low-voltage circuit safety before powering physical builds.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T08 · Insecure Dependencies

Warning
Location
references/minipro.md:52
Finding

Unpinned External Source Is Built and Installed with Root Privileges

Content
View full analysis

Vulnerability Details

File Location: references/minipro.md:52-56
Vulnerability Type: Unpinned and unverified third-party source installation
Risk Level: Medium

bash
git clone https://github.com/vdudouyt/minipro.git
make
sudo make install

Technical Analysis

The documented installation procedure clones the mutable default branch of an external GitHub repository and immediately builds and installs its contents. It does not pin an immutable commit or reviewed release, nor does it require checksum or signature verification.

Both make and sudo make install execute repository-controlled build instructions. In particular, the installation step runs those instructions with root privileges. Consequently, the code executed by users can differ from the code that was present when this skill was reviewed.

This creates a supply-chain risk: compromise of the repository, maintainer account, upstream hosting, or default branch could cause attacker-controlled build or installation commands to execute on systems whose users follow the reference.

Attack Path

  1. An attacker compromises the referenced repository, its maintainer account, or another mechanism controlling the repository's default branch.
  2. The attacker modifies the build files or source tree to include malicious commands.
  3. A user or agent follows the documented source-installation procedure.
  4. git clone retrieves the modified, unverified content.
  5. make executes repository-controlled build logic with the user's privileges.
  6. sudo make install executes repository-controlled installation logic with root privileges.
  7. The malicious installation logic can alter system files or install additional attacker-controlled components.

Impact Assessment

Successful exploitation could first obtain the privileges of the user running make and then root privileges when sudo make install is invoked. Root-level installation logic could modify arbitrary system files, install ...[truncated 306 chars]

Remediation
View remediation

Remediation Suggestions

  1. Prefer the operating system's trusted package-manager installation path already documented in the file.
  2. If source installation is required, use the current official upstream repository and pin an immutable, reviewed commit hash or signed release tag.
  3. Verify a cryptographic signature or a checksum obtained through an independent trusted channel before building.
  4. Review the repository's build and installation scripts, including included makefiles and generated hooks, before execution.
  5. Build in an isolated, unprivileged environment with network access disabled where practical.
  6. Avoid sudo make install. Use a staged installation directory or package-building workflow, inspect the resulting files, and install through a package manager with an auditable manifest.
  7. Document the expected release version, commit identifier, checksum, verification commands, and provenance information directly in the installation procedure.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Rogue AgentSelf-Modification, Session Persistence
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Findings (15)

Description-Behavior Mismatch

High
Category
Not specified by scanner
Confidence
99% confidence
Finding

The manifest says this skill generates HTML5 Canvas breadboard circuit mockups and visual diagrams for electronics layouts. This file instead specifies an assembly toolchain, memory map, ROM image construction, EEPROM programming, and emulator behavior for a 6502 SBC, which is a materially different capability than visual circuit diagram generation.

Content

No source excerpt is available for this finding.

Self-Modification

High
Category
Rogue Agent
Confidence
90% confidence
Finding

Skill modifies its own code, configuration, or behavior at runtime. Self-modification enables an agent to escalate privileges, disable safety constraints, or install persistent backdoors.

Content

Scanner excerpt · references/assembly-language.md (reported line 132)May include surrounding context.

md
### Key Considerations

* Code is **read-only at runtime**
* Self-modifying code not recommended
* Place jump tables and constants in EEPROM
* Use RAM for variables and stack

Ae4

Medium
Category
analysis-evasion
Confidence
80% confidence
Finding

Suspicious Unicode normalization or mixed-script content

Content

No source excerpt is available for this finding.

Ae4

Medium
Category
analysis-evasion
Confidence
80% confidence
Finding

Suspicious Unicode normalization or mixed-script content

Content

No source excerpt is available for this finding.

Ae4

Medium
Category
analysis-evasion
Confidence
80% confidence
Finding

Suspicious Unicode normalization or mixed-script content

Content

No source excerpt is available for this finding.

Ae4

Medium
Category
analysis-evasion
Confidence
80% confidence
Finding

Suspicious Unicode normalization or mixed-script content

Content

No source excerpt is available for this finding.

Ae4

Medium
Category
analysis-evasion
Confidence
80% confidence
Finding

Suspicious Unicode normalization or mixed-script content

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The document gives novices step-by-step instructions for powering breadboard circuits directly from a battery, including ICs, LEDs, and timing circuits, but does not include safety notes about polarity, current limiting, short circuits, voltage compatibility, or battery heating. In this skill context, the risk is increased because the content is specifically meant to help users build physical electronics, so omissions can lead to damaged components, overheated batteries, or minor user injury.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium
Category
Not specified by scanner
Confidence
98% confidence
Finding

The manifest says this skill generates breadboard circuit mockups and visual diagrams using HTML5 Canvas for component placement and electronics visualization. This file instead provides a software CPU emulation specification covering instruction execution, flags, cycle counting, interrupt vectors, and emulator validation, which is a materially different capability from drawing or visual mockup generation.

Content

No source excerpt is available for this finding.

Context-Inappropriate Capability

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The documented capability here supports building or validating a 6502 CPU emulator, including execution semantics and peripheral integration, which is unrelated to the manifest's narrow purpose of creating HTML5 Canvas breadboard and schematic mockups. Providing emulator-development reference material expands the skill into retrocomputing software architecture rather than electronics layout visualization.

Content

No source excerpt is available for this finding.

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · references/minipro.md (reported line 47)May include surrounding context.

4.1 Linux

bash
sudo apt install minipro

or from source:

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · references/minipro.md (reported line 55)May include surrounding context.

4.1 Linux

bash
sudo apt install minipro

or from source:

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

This markdown file includes direct examples for writing and erasing chips, such as -w and -e -w, which can overwrite or destroy existing device contents. Although the document has general hardware-safety tips later, it does not clearly warn users near these commands that they are destructive and may permanently alter firmware or erase prior data.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

This skill provides step-by-step physical circuit build instructions, including power rail wiring, IC placement, and component connections, but does not include a user-facing safety warning about powering, polarity, voltage limits, or disconnecting power before rewiring. In a hardware-construction context, omission of basic safety guidance can lead users to miswire circuits, damage components, overheat parts, or potentially cause minor burns or short circuits.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
84% confidence
Finding

This markdown file includes a concrete minipro -w rom.bin example that performs a write operation to EEPROM/flash media. While the document describes programming generally, it does not explicitly warn near the example that the command alters device contents and should be used only with the correct target/image.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.