Security audit

EvoAgentX Workflow

Security checks for vulnerabilities and agentic risk

Overview

This skill is not clearly malicious, but it overstates its EvoAgentX/OpenClaw capabilities and includes unsafe workflow-file generation that can overwrite files or create injectable Python code.

Review this skill before installing. Use it only in a disposable or dedicated environment, pin and verify the EvoAgentX dependency yourself, and avoid passing untrusted workflow names or descriptions to the CLI. Treat the generated workflow files as code that must be reviewed before running or importing.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:9
Finding: Unpinned Third-Party Dependency Installation
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Error

Location: scripts/evoagentx_cli.py:74
Finding: Unsanitized Workflow Name and Description Permit Path Traversal and Generated-Code Injection
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (2)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 97% confidence
Finding: The skill materially overstates its functionality, claiming OpenClaw integration, evolutionary optimization features, and concrete EvoAgentX bridging that are not actually implemented. This is dangerous because users or higher-level agents may trust the skill to perform complex automation safely, install dependencies, or make workflow decisions based on nonexistent controls, causing unsafe delegation, supply-chain exposure, and operational misuse.
Content: No source excerpt is available for this finding.

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 90% confidence
Finding: The skill advertises and demonstrates capabilities that imply network access and file creation, but it declares no explicit tool scope or permissions. In an agent ecosystem, this weakens policy enforcement and reviewability, making it easier for the skill to perform higher-risk actions than users or the platform expect.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.