ClawHub
Back to skill

Security audit

Rdk X5 Media

Security checks for vulnerabilities and agentic risk

Overview

This media skill is mostly purpose-aligned, but it includes an unsafe RTSP credential example and VNC remote desktop enablement without enough security guidance.

Review before installing. Use this skill only on intended RDK X5 devices, avoid copying real camera credentials into command lines, prefer least-privileged camera accounts and protected credential handling, and only enable VNC on trusted networks with strong authentication and a clear plan to disable it when not needed.

A.I.G

Vulnerability Patterns
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T09 · Insecure Skill Coding Practices

Warning
Location
SKILL.md:66
Finding

RTSP Credentials Exposed in Command-Line Arguments

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Findings (6)

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 23)May include surrounding context.

bash
# 选择音频设备（PulseAudio 通道同步，v3.4.1+）
sudo srpi-config
# → Audio Options

# 查看设备

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 90)May include surrounding context.

bash
# 选择音频设备（PulseAudio 通道同步，v3.4.1+）
sudo srpi-config
# → Audio Options

# 查看设备

Description-Behavior Mismatch

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill manifest explicitly says it should not be used for running AI algorithms, but the RTSP section is labeled 'RTSP 拉流 + AI 推理' and directs users to launch a client and view inference-style results in a browser. This creates scope drift and may cause the agent to invoke a media skill for AI-related workflows outside its declared boundary, weakening tool selection and policy enforcement.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The RTSP example embeds a username and password directly in the connection URI without any warning about credential handling. Users may copy this pattern into shell history, logs, screenshots, or shared docs, leading to credential disclosure and reuse risks on cameras or related systems.

Content

No source excerpt is available for this finding.

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
81% confidence
Finding

Enabling a VNC server via an elevated configuration tool exposes a remote desktop service, potentially increasing the attack surface if authentication, network exposure, and encryption are not addressed. In a media skill, remote desktop setup is sensitive because it can grant broad interactive access to the device beyond media functions.

Content

Scanner excerpt · SKILL.md (reported line 101)May include surrounding context.

8. VNC 远程桌面

bash
sudo srpi-config
# → Interface Options → VNC → Enable

Context-Inappropriate Capability

Low
Category
Not specified by scanner
Confidence
72% confidence
Finding

The manifest enumerates audio handling, video codec use, RTSP streaming, display configuration, LCD adaptation, and VNC server setup, but does not mention running a WebSocket-based preview service. Exposing media through a separate WebSocket service is an additional serving capability that is not clearly declared in the skill's stated scope.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.