ClawHub
Back to skill

Security audit

Rdk X5 System

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed RDK X5 system-management guide that uses elevated commands for expected device administration tasks, with no evidence of hidden execution, exfiltration, or deception.

Install only if you administer an RDK X5 and want Codex guidance for privileged system changes. Review each sudo command before running it, avoid firmware or apt upgrades unless you intend them, and be careful with systemd enable because it makes a service start on boot.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Findings (21)

Chaining Abuse

High
Category
Tool Misuse
Confidence
75% confidence
Finding

Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.

Content

Scanner excerpt · SKILL.md (reported line 39)May include surrounding context.

3. OTA 在线升级

bash
sudo apt update && sudo apt upgrade -y

# 升级 miniboot 固件到 NAND
sudo rdk-miniboot-update

Chaining Abuse

High
Category
Tool Misuse
Confidence
75% confidence
Finding

Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.

Content

Scanner excerpt · SKILL.md (reported line 66)May include surrounding context.

cat /sys/devices/system/cpu/cpu0/cpufreq/scaling_available_frequencies # 可用频率

切换为性能模式（最高频率）

echo performance | sudo tee /sys/devices/system/cpu/cpu0/cpufreq/scaling_governor

text

### 6. config.txt 配置

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 32)May include surrounding context.

2. 系统备份（生成可烧录镜像）

bash
sudo rdk-backup

生成 .img 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 39)May include surrounding context.

2. 系统备份（生成可烧录镜像）

bash
sudo rdk-backup

生成 .img 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 42)May include surrounding context.

2. 系统备份（生成可烧录镜像）

bash
sudo rdk-backup

生成 .img 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 66)May include surrounding context.

2. 系统备份（生成可烧录镜像）

bash
sudo rdk-backup

生成 .img 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 72)May include surrounding context.

2. 系统备份（生成可烧录镜像）

bash
sudo rdk-backup

生成 .img 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 79)May include surrounding context.

2. 系统备份（生成可烧录镜像）

bash
sudo rdk-backup

生成 .img 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 87)May include surrounding context.

2. 系统备份（生成可烧录镜像）

bash
sudo rdk-backup

生成 .img 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 104)May include surrounding context.

2. 系统备份（生成可烧录镜像）

bash
sudo rdk-backup

生成 .img 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 105)May include surrounding context.

2. 系统备份（生成可烧录镜像）

bash
sudo rdk-backup

生成 .img 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 106)May include surrounding context.

2. 系统备份（生成可烧录镜像）

bash
sudo rdk-backup

生成 .img 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 107)May include surrounding context.

2. 系统备份（生成可烧录镜像）

bash
sudo rdk-backup

生成 .img 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 114)May include surrounding context.

2. 系统备份（生成可烧录镜像）

bash
sudo rdk-backup

生成 .img 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 120)May include surrounding context.

2. 系统备份（生成可烧录镜像）

bash
sudo rdk-backup

生成 .img 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 128)May include surrounding context.

2. 系统备份（生成可烧录镜像）

bash
sudo rdk-backup

生成 .img 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 129)May include surrounding context.

2. 系统备份（生成可烧录镜像）

bash
sudo rdk-backup

生成 .img 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 130)May include surrounding context.

2. 系统备份（生成可烧录镜像）

bash
sudo rdk-backup

生成 .img 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

Session Persistence

Medium
Category
Rogue Agent
Confidence
80% confidence
Finding

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Content

Scanner excerpt · SKILL.md (reported line 105)May include surrounding context.

text
```bash
sudo systemctl daemon-reload
sudo systemctl enable my-app.service
sudo systemctl start my-app.service
sudo systemctl status my-app.service

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 140)May include surrounding context.

md
| 系统无法启动 | miniboot 降级 | 只能重新烧录官方镜像 |
| 温度过高降频 | 无散热或负载过高 | 加装散热片/风扇；检查 BPU 使用率 |
| `rdk-backup` 失败 | 空间不足 | `df -h` 检查；清理 /tmp 或挂载外部存储 |
| `resize2fs` 无效 | 分区未扩展 | 先 `sudo growpart /dev/mmcblk0 2` 再 `resize2fs` |

Context-Inappropriate Capability

Low
Category
Not specified by scanner
Confidence
76% confidence
Finding

The manifest describes this skill as handling system configuration, backup/restore, firmware/kernel changes, autostart, storage expansion, and viewing version/log information. The added '桌面切换' capability changes the graphical desktop mode (CPU/GPU desktop), which is not mentioned in the declared scope and is not clearly justified by the listed system-management tasks.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.