T08 · Insecure Dependencies
Warning
- Location
SKILL.md:5- Finding
Unpinned Third-Party Homebrew Dependency
- Content
View full analysis
- Remediation
View remediation
Security audit
OpenClaw Safety Guard
Security checks for vulnerabilities and agentic risk
Overview
This skill is a small wrapper for a documented safety-guard CLI, with normal but privacy-relevant use of external AI providers and a third-party Homebrew install source.
Install only if you trust the safety-guard Homebrew tap and are comfortable sending selected URLs, files, and YouTube content to your configured AI provider or optional extraction services. Avoid running it on private, regulated, or confidential material unless those providers and tokens are approved for that data.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The skill instructs users to submit URLs, local files, and YouTube links to a CLI that relies on external model providers and optional fallback services, but it does not clearly warn that submitted content may be transmitted off-device. This can lead users to unknowingly send sensitive documents, private URLs, or regulated data to third-party AI/extraction services, creating confidentiality and compliance risk.
- Content
Description-Behavior Mismatch
Medium
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The provided manifest context describes this skill as 'safety-guard' for guarding URLs or files with the safety-guard CLI, but the file metadata uses the slug 'summarize'. This indicates a likely description/behavior identity mismatch at the skill packaging level, suggesting the artifact may not correspond to the stated skill purpose.
- Content
Missing User Warnings
Low
- Category
- Not specified by scanner
- Confidence
- 86% confidence
- Finding
The documentation lists provider API key environment variables and optional third-party service tokens, but does not pair them with a warning that these credentials enable access to external services and may cause user content to be transmitted externally. While merely naming env vars is common, in this context it increases the chance that users configure remote services without understanding the privacy and access implications.
- Content