ClawHub
Back to skill

Security audit

Organise photos

Security checks for vulnerabilities and agentic risk

Overview

The skill is a coherent photo-organizing helper, but it automatically installs unpinned Python packages and uses predictable /tmp files that later influence file moves or deletions.

Review before installing. Use an isolated virtual environment with pinned dependencies, avoid the automatic pip-install snippets, and verify the exact files to be moved or deleted before approving cleanup. Prefer moving rejected photos over permanent deletion.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)

T08 · Insecure Dependencies

Warning
Location
SKILL.md:92
Finding

Automatic Installation of Unpinned Runtime Dependencies

Content
View full analysis
Remediation
View remediation

T09 · Insecure Skill Coding Practices

Warning
Location
SKILL.md:269
Finding

Predictable Shared Temporary Files Permit Script or Analysis-State Tampering

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Tool Parameter Abuse

High
Category
Tool Misuse
Confidence
85% confidence
Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · SKILL.md (reported line 477)May include surrounding context.

md
`pip install rawpy` — add rawpy support to detect_bad_exposure.py for RAW files

### Temp Files
- `/tmp/photo_analysis.json` — full analysis results; clean up after: `rm /tmp/photo_analysis.json`

### Folder Safety
- Never delete files without explicit user confirmation

Context-Inappropriate Capability

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill's Python snippet automatically runs pip install Pillow numpy -q via os.system(...) when imports fail. That gives the skill package installation and shell execution capability during normal use, which expands its privileges beyond simple photo organization and introduces supply-chain risk from downloading and executing external code at runtime.

Content

No source excerpt is available for this finding.

Context-Inappropriate Capability

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The blur/burst analysis script also auto-installs packages (opencv-python-headless, Pillow, imagehash, numpy) by invoking pip through the shell. This creates a runtime supply-chain exposure and permits networked code retrieval/execution in a skill whose purpose is local photo analysis, making compromise of the environment more plausible if dependency sources are tampered with or unintended packages are resolved.

Content

No source excerpt is available for this finding.