ClawHub
Back to skill

Security audit

SSL Certificate Checker

Security checks for vulnerabilities and agentic risk

Overview

This skill is a simple SSL certificate checking guide with purpose-aligned OpenSSL examples and no hidden code, persistence, or credential access.

Install only if you are comfortable with the agent running OpenSSL against domains you specify. Treat domain names as untrusted input: validate them as DNS names or IP addresses and avoid pasting arbitrary user-provided strings directly into shell commands.

A.I.G

Vulnerability Patterns
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T09 · Insecure Skill Coding Practices

Error
Location
SKILL.md:27
Finding

Potential Shell Command Injection Through Unvalidated Domain Substitution

Content
View full analysis
/dev/null | openssl x509 -noout -dates -subject -issuer # Get detailed certificate information echo | openssl s_client -connect example.com:443 -servername example.com 2>/dev/null | openssl x509 -noout -text ``` ### Technical Analysis The Skill is intended to check certificates for “any domain,” so an agent using these examples is expected to replace `example.com` with a domain supplied by the user. Both occurrences of the domain are represented as unquoted shell tokens, and the instructions do not require validation before constructing and executing the command. If an implementation performs direct textual substitution and passes the resulting command to a shell, shell metacharacters in the supplied value can alter the command structure. This can permit command substitution, command chaining, redirection, or other unintended shell operations. The documented commands are static examples rather than executable scripts, so exploitation depends on an agent or downstream implementation substituting untrusted input directly into these templates. Nevertheless, the Skill promotes an unsafe command-construction pattern for its stated user-controlled input. ### Attack Path 1. An attacker asks the agent to check a purported domain containing shell syntax rather than a valid DNS name or IP address. 2. The agent replaces `example.com` in one of the documented command templates without validating or safely encoding the supplied value. 3. The agent executes the constructed text through a shell. 4. The shell interprets the injected metacharacters as command syntax. 5. The injected operation executes with the privileges and environment ...[truncated 784 chars]
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep