ClawHub
Back to skill

Security audit

Dorar Hadith

Security checks for vulnerabilities and agentic risk

Overview

The skill is a coherent Dorar hadith search helper, but its search script handles user queries unsafely enough that a crafted query could run local code.

Review before installing. The skill's purpose is understandable and there is no evidence of hidden persistence or exfiltration beyond the documented Dorar search request, but the query encoding implementation should be fixed before routine use because specially crafted query text can execute local Python code. Avoid passing untrusted or copied text into this script until it encodes the query via a safe argument or stdin-based method.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

External Script Fetching

High
Category
Supply Chain
Content
# URL encode the query
ENCODED=$(python3 -c "import urllib.parse; print(urllib.parse.quote('$QUERY'))")

RESULT=$(curl -s -L \
  -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" \
  -H "Accept: application/json, text/javascript, */*" \
  -H "Referer: https://dorar.net/" \
Confidence
90% confidence
Finding
Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.

Natural-Language Policy Violations

Medium
Confidence
88% confidence
Finding
Line L41 states that keywords must be written in Arabic, which imposes a language constraint in the skill's natural-language behavior. The file does not offer an opt-in choice for another language or explain a policy justification for restricting input language.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The script sends the user-provided search query to dorar.net over the network without any disclosure, consent prompt, or warning in the script output. Even if this is expected for a search utility, the query may contain sensitive religious, personal, or investigative text, so silent transmission creates a privacy risk rather than a code-execution flaw.

Context-Inappropriate Capability

Low
Confidence
79% confidence
Finding
With no manifest or stated purpose available, the parser appears to primarily transform stdin JSON/HTML content into cleaned text output. The additional capability to read an environment variable and construct an external search URL is not justified by the visible parsing behavior and expands the skill's effective data sources beyond stdin.

Static analysis

No suspicious patterns detected.