ClawHub
Back to skill

Security audit

BMW K1200RS Repair Assistant

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed motorcycle repair decision-support guide with safety limits and no code, persistence, credential use, or hidden data handling.

Installers should understand this is motorcycle repair decision support, not a professional certification of safety or roadworthiness. Verify factory specifications and procedures in a legally obtained BMW Repair Manual and use a qualified technician for brakes, steering, suspension, fuel, throttle, ABS, or any uncertain safety-critical work.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
80% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 74)May include surrounding context.

md
## Boundaries

Do not include or reconstruct copyrighted BMW repair manual content. Do not ask the user to upload copyrighted material they do not have rights to use. The skill may help interpret excerpts, page references, photos, measurements, and user-provided notes from the user's own legally obtained manual.

This assistant is decision support. It does not certify repairs, replace professional inspection, or guarantee roadworthiness.