ClawHub
Back to skill

Security audit

Rdk X5 Quickstart

Security checks for vulnerabilities and agentic risk

Overview

This quickstart is mostly coherent, but it gives beginners high-impact setup commands without enough safety guardrails.

Review this skill before installing or using it. Prefer balenaEtcher over dd, verify the target device and image checksum, change default passwords before putting the board on a network, avoid putting Wi-Fi passwords directly in shell commands, and treat the apt upgrade and TROS demo steps as broader system/development guidance outside a minimal first-use quickstart.

A.I.G

Vulnerability Patterns
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (2)

T09 · Insecure Skill Coding Practices

Error
Location
SKILL.md:20
Finding

Unsafe Privileged Disk-Imaging Command Can Overwrite the Host Disk

Content
View full analysis
Remediation
View remediation
/dev/null || true printf 'This will erase all data on %s. Type the full device path to confirm: ' "$TARGET" read -r CONFIRM [ "$CONFIRM" = "$TARGET" ] || exit 1 sudo dd if=rdk_os_image.img of="$TARGET" bs=4M status=progress conv=fsync ``` - Add a prominent statement that substituting the wrong device can irreversibly erase the host computer. ]]>

T09 · Insecure Skill Coding Practices

Error
Location
SKILL.md:27
Finding

Known Default Credentials Are Not Rotated Before Network Exposure

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Findings (8)

Chaining Abuse

High
Category
Tool Misuse
Confidence
75% confidence
Finding

Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.

Content

Scanner excerpt · SKILL.md (reported line 53)May include surrounding context.

Step 5: 更新系统（推荐）

bash
sudo apt update && sudo apt upgrade -y

Step 6: 运行第一个 AI Demo

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 20)May include surrounding context.

  1. 从 地瓜机器人官网 下载最新 RDK OS 镜像
  2. 使用 balenaEtcher 或 dd 烧录到 microSD 卡（≥16GB）：
bash
sudo dd if=rdk_os_image.img of=/dev/sdX bs=4M status=progress && sync
  1. 插入 SD 卡到 RDK X5

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 53)May include surrounding context.

  1. 从 地瓜机器人官网 下载最新 RDK OS 镜像
  2. 使用 balenaEtcher 或 dd 烧录到 microSD 卡（≥16GB）：
bash
sudo dd if=rdk_os_image.img of=/dev/sdX bs=4M status=progress && sync
  1. 插入 SD 卡到 RDK X5

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
99% confidence
Finding

Publishing default credentials without an immediate requirement to change them leaves first-boot systems exposed to trivial compromise, especially once they obtain a DHCP address on a local network. In a quickstart context, beginners may treat these credentials as acceptable defaults and never rotate them, enabling unauthorized local or remote access.

Content

No source excerpt is available for this finding.

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 37)May include surrounding context.

md
ip addr show eth0

# 连接 WiFi
sudo nmcli device wifi connect "你的WiFi名" password "你的密码"

# 确认联网
ping -c 2 baidu.com

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

Passing the Wi-Fi password directly on the command line can expose it through shell history, terminal scrollback, logs, or process inspection by other local users. In a beginner quickstart, users are likely to copy-paste the command verbatim, increasing the chance that sensitive credentials are stored or disclosed unintentionally.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The manifest says this skill should not be used for firmware upgrade or advanced system management and directs those tasks to rdk-x5-system. However, the body includes a dedicated '更新系统（推荐）' step with apt update && apt upgrade -y, which goes beyond initial onboarding and overlaps with system-management behavior excluded by the manifest.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The manifest explicitly says this skill should not be used for TROS development and points users to rdk-x5-tros. Yet Step 6B instructs users to source a TROS environment and launch a ROS2/TROS demo pipeline, which materially overlaps with the excluded TROS scope.

Content

No source excerpt is available for this finding.