Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed ClawHub login helper for headless servers, with some usability and accuracy issues but no artifact-backed malicious behavior.
Install only if you are comfortable letting this helper invoke your local ClawHub CLI and participate in account login. Treat authorization URLs, callback URLs, and tokens as sensitive, and note that the callback automation appears incomplete despite the help text.
The file’s operational instructions, warnings, and usage guidance are entirely in Chinese, which effectively forces a specific language on users. The policy allows locale constraints only when users are given a choice or when the restriction is clearly documented and justified, neither of which appears here.
This code file contains natural-language instructions and CLI help text entirely in Chinese, which effectively forces a specific language on users without opt-in. The policy allows locale constraints only when clearly documented and justified or when users are offered a choice, neither of which is present here.
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
def check_login_status():
"""检查登录状态"""
try:
result = subprocess.run(['clawhub', 'whoami'], capture_output=True, text=True)
if result.returncode == 0:
return True, result.stdout.strip()
return False, result.stderr.strip()
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
"""获取授权 URL"""
try:
# 运行 clawhub login，捕获输出
result = subprocess.run(['clawhub', 'login'], capture_output=True, text=True)
# 从错误输出中提取 URL
output = result.stderr
The argument help text says the --callback parameter is '用于自动完成登录' (used to automatically complete login), creating a clear expectation that providing a callback URL will be handled by the script. However, after parsing arguments, the code never references args.callback anywhere, and login flow relies only on subprocess calls and token-file checks.
No suspicious patterns detected.