ClawHub
Back to skill

Security audit

Super Ai Dev Runtime

Security checks for vulnerabilities and agentic risk

Overview

This skill is a developer runtime connector with powerful but purpose-aligned coding tools; users should only connect it to a trusted runtime endpoint.

Install this only if you trust the AI Dev Runtime server you configure. Keep the endpoint local or controlled by you, review commands and patches before applying them, and avoid using it on repositories containing secrets unless you understand the runtime's memory and data-retention behavior.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The manifest advertises productivity benefits but does not prominently warn that the skill can run terminal commands and modify files via edit and patch operations. That omission can mislead users or upstream agents about the skill's privilege level, increasing the risk of unintended destructive actions, execution of unsafe commands, or exposing sensitive code/workspace contents to the runtime service.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The manifest description frames the skill as a development toolkit for file operations, terminal execution, testing, search, and memory-enhanced workflows. However, the documentation also instructs users to configure an HTTP server endpoint and optional API key, which introduces a service-calling capability not disclosed in the main description and goes beyond purely local runtime behavior.

Content

No source excerpt is available for this finding.

Context-Inappropriate Capability

Low
Category
Not specified by scanner
Confidence
77% confidence
Finding

The stated purpose focuses on coding workflows such as reading, editing, searching, terminal execution, and running tests. Requiring AI_DEV_RUNTIME_URL and optionally AI_DEV_RUNTIME_API_KEY introduces a service access capability that is not clearly declared as part of the skill's scope, especially since the manifest does not mention networked operation.

Content

No source excerpt is available for this finding.