ClawHub
Back to skill

Security audit

Db Explorer

Security checks for vulnerabilities and agentic risk

Overview

This database helper is mostly transparent, but it should be reviewed because it includes commands that can export, import, and restore real database data without enough guardrails.

Install only if you are comfortable with the agent using database credentials and producing local exports or dumps. Treat restore, import, migration, and full-table export commands as high-risk: confirm the exact target database, prefer staging first, take a backup, and review the exact command before execution.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Description-Behavior Mismatch

Medium
Confidence
90% confidence
Finding
The skill is presented as read-oriented exploration/debug tooling, but it also documents restore and migration commands that can modify destination databases and overwrite data. This mismatch increases the chance an agent or user invokes destructive capabilities without appropriate risk framing, approvals, or guardrails.

Intent-Code Divergence

Medium
Confidence
95% confidence
Finding
The safety rules require showing and confirming write operations, but later sections provide direct restore and import commands with no confirmation, rollback, or staging workflow. That inconsistency can cause an agent to perform irreversible data changes despite the earlier stated policy.

Vague Triggers

Medium
Confidence
83% confidence
Finding
The activation cues are broad enough that normal requests like 'check the database' or 'show me the data' could trigger a powerful database skill in contexts where the user did not intend direct DB access. Because this skill includes export, backup, restore, and diagnostic capabilities, over-triggering increases the risk of unnecessary access to sensitive systems and data.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The export and backup guidance focuses on mechanics but does not clearly warn about sensitive-data exposure, file permission risks, local artifact retention, or the impact of restore operations. In a database skill, these omissions are dangerous because exports and dumps commonly contain credentials, PII, or production data that can be copied or restored insecurely.

Static analysis

No suspicious patterns detected.