ClawHub
Back to skill

Security audit

Web Coder

Security checks for vulnerabilities and agentic risk

Overview

This is a broad web-development reference skill with some examples that need normal care, but I found no hidden behavior, executable payloads, or purpose-mismatched actions.

Install only if you want a broad web-development reference skill. Before letting an agent run examples from it, review commands that install packages, deploy to hosting providers, use sudo/systemctl, or touch secrets; prefer pinned package versions, least-privilege environments, and placeholder-only .env examples.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)

T08 · Insecure Dependencies

Warning
Location
references/servers-infrastructure.md:117
Finding

Unpinned Third-Party Package Retrieval and Execution

Content
View full analysis
Remediation
View remediation

T09 · Insecure Skill Coding Practices

Note
Location
SKILL.md:501
Finding

Content Security Policy Example Permits Unsafe Inline Scripts

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
Findings (36)

Hidden Instructions

High
Category
Prompt Injection
Confidence
70% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 271)May include surrounding context.

Start with basic HTML, enhance with CSS, add JavaScript functionality:

html
<!-- Base HTML (works without CSS/JS) -->
<form action="/submit" method="POST">
  <label for="email">Email:</label>
  <input type="email" id="email" name="email" required>

Hidden Instructions

High
Category
Prompt Injection
Confidence
70% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/accessibility.md (reported line 24)May include surrounding context.

ARIA Roles

html
<!-- Landmark roles -->
<nav role="navigation">
<main role="main">
<aside role="complementary">

Tool Parameter Abuse

High
Category
Tool Misuse
Confidence
80% confidence
Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/architecture-patterns.md (reported line 345)May include surrounding context.

GET /api/users/1 // Get user POST /api/users // Create user PUT /api/users/1 // Update user DELETE /api/users/1 // Delete user

text

### GraphQL

Credential Access

High
Category
Privilege Escalation
Confidence
95% confidence
Finding

The .env snippet demonstrates storing a live-style API credential directly in a file example, which can encourage unsafe secret storage and accidental disclosure through version control, screenshots, logs, or copied templates. Because this file is specifically a web development reference, readers are likely to reuse the pattern verbatim in real projects, increasing the chance of credential exposure.

Content

Scanner excerpt · references/development-tools.md (reported line 465)May include surrounding context.

Environment Variables

bash
# .env
DATABASE_URL=postgres://localhost/db
API_KEY=secret-key-here
NODE_ENV=development

Hidden Instructions

High
Category
Prompt Injection
Confidence
70% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/html-markup.md (reported line 144)May include surrounding context.

html
<head>
  <!-- Character encoding -->
  <meta charset="UTF-8">
  
  <!-- Responsive viewport -->

Tool Parameter Abuse

High
Category
Tool Misuse
Confidence
80% confidence
Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/http-networking.md (reported line 302)May include surrounding context.

md
POST   /users           # Create user
PUT    /users/123       # Update user 123 (full)
PATCH  /users/123       # Update user 123 (partial)
DELETE /users/123       # Delete user 123

GET    /users/123/posts # List posts by user 123
GET    /posts?author=123 # Alternative: filter posts

Hidden Instructions

High
Category
Prompt Injection
Confidence
70% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/media-graphics.md (reported line 84)May include surrounding context.

  • Animation support
html
<!-- Inline SVG -->
<svg width="100" height="100">
  <circle cx="50" cy="50" r="40" fill="blue" />
</svg>

Hidden Instructions

High
Category
Prompt Injection
Confidence
70% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/media-graphics.md (reported line 341)May include surrounding context.

md
800px"
     alt="Responsive image">

<!-- Pixel density -->
<img src="image.jpg"
     srcset="image.jpg 1x,
             image@2x.jpg 2x,

Hidden Instructions

High
Category
Prompt Injection
Confidence
70% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/performance-optimization.md (reported line 99)May include surrounding context.

Responsive Images

html
<!-- Picture element for art direction -->
<picture>
  <source media="(min-width: 1024px)" srcset="large.webp" type="image/webp">
  <source media="(min-width: 768px)" srcset="medium.webp" type="image/webp">

Hidden Instructions

High
Category
Prompt Injection
Confidence
70% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/performance-optimization.md (reported line 269)May include surrounding context.

md
<!-- DNS prefetch -->
<link rel="dns-prefetch" href="//example.com">

<!-- Preconnect (DNS + TCP + TLS) -->
<link rel="preconnect" href="https://fonts.googleapis.com">

<!-- Prefetch (low priority for next page) -->

Credential Access

High
Category
Privilege Escalation
Confidence
70% confidence
Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · references/security-authentication.md (reported line 193)May include surrounding context.

md
1. Client redirects to auth server
2. User authenticates and grants permission
3. Auth server redirects back with code
4. Client exchanges code for access token
5. Client uses token to access resources

#### 4. Multi-Factor Authentication (MFA)

Credential Access

High
Category
Privilege Escalation
Confidence
60% confidence
Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · references/servers-infrastructure.md (reported line 384)May include surrounding context.

Configuration without hardcoding.

bash
# .env file
DATABASE_URL=postgresql://localhost/mydb
API_KEY=secret-key-here
NODE_ENV=production

Credential Access

High
Category
Privilege Escalation
Confidence
60% confidence
Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · references/servers-infrastructure.md (reported line 397)May include surrounding context.

Configuration without hardcoding.

bash
# .env file
DATABASE_URL=postgresql://localhost/mydb
API_KEY=secret-key-here
NODE_ENV=production

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill description is extremely broad, covering nearly all web development, networking, security, infrastructure, and terminology tasks. In agent-routing systems, such breadth can cause over-triggering, leading this skill to activate in many ordinary conversations and unnecessarily import strong behavioral instructions that may override more task-appropriate defaults.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The 'When to Use This Skill' section enumerates many broad triggers without boundaries, making invocation likely across a wide range of normal web-related prompts. This increases prompt-scope risk because the agent may apply this skill's persona and workflow even when a narrower or safer skill would be more appropriate.

Content

No source excerpt is available for this finding.

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
85% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · references/development-tools.md (reported line 72)May include surrounding context.

bash
# Initialize project
npm init
npm init -y # Skip prompts

# Install dependencies
npm install package-name

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The documentation includes a .env example with API_KEY=secret-key-here but gives no warning that API keys are sensitive, should never be committed, and must be sourced from a secret manager or local untracked environment file. In a developer reference, this can normalize insecure credential handling and lead users to copy the pattern directly into repositories or shared examples.

Content

No source excerpt is available for this finding.

Unsafe Defaults

Medium
Category
Tool Misuse
Confidence
60% confidence
Finding

Tool defaults are unsafe or overly permissive (e.g. disabled TLS verification, no authentication, world-writable permissions). Unsafe defaults widen the attack surface.

Content

Scanner excerpt · references/development-tools.md (reported line 468)May include surrounding context.

.env

DATABASE_URL=postgres://localhost/db API_KEY=secret-key-here NODE_ENV=development

text

```javascript

Rp1

Medium
Category
MCP Rug Pull
Confidence
70% confidence
Finding

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Content

No source excerpt is available for this finding.

Rp1

Medium
Category
MCP Rug Pull
Confidence
70% confidence
Finding

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Content

No source excerpt is available for this finding.

Rp1

Medium
Category
MCP Rug Pull
Confidence
75% confidence
Finding

Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.

Content

No source excerpt is available for this finding.

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · references/servers-infrastructure.md (reported line 273)May include surrounding context.

Let's Encrypt (Free):

bash
# Certbot
sudo certbot --nginx -d example.com

Cloudflare (Free with Cloudflare DNS)

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · references/servers-infrastructure.md (reported line 490)May include surrounding context.

Let's Encrypt (Free):

bash
# Certbot
sudo certbot --nginx -d example.com

Cloudflare (Free with Cloudflare DNS)

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · references/servers-infrastructure.md (reported line 491)May include surrounding context.

Let's Encrypt (Free):

bash
# Certbot
sudo certbot --nginx -d example.com

Cloudflare (Free with Cloudflare DNS)

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · references/servers-infrastructure.md (reported line 492)May include surrounding context.

Let's Encrypt (Free):

bash
# Certbot
sudo certbot --nginx -d example.com

Cloudflare (Free with Cloudflare DNS)

Static analysis

No suspicious patterns detected.