ClawHub
Back to skill

Security audit

embedded-systems

Security checks for vulnerabilities and agentic risk

Overview

This is a markdown-only embedded-systems helper whose instructions are broad but aligned with firmware engineering tasks and show no hidden execution, exfiltration, or persistence.

Installers should treat this as a general embedded-systems expert prompt. Review any generated firmware changes carefully and require explicit approval before flashing or deploying to real devices, especially safety-critical or production hardware.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
94% confidence
Finding
The skill's invocation guidance is broad and underspecified, directing the agent to query context and implement embedded solutions without clear trigger boundaries, authorization checks, or task-scope limits. In an agentic environment, this can cause the skill to activate in inappropriate contexts or take overly broad actions on firmware, hardware, or deployment-related tasks, increasing the chance of unsafe changes or misuse.

Static analysis

No suspicious patterns detected.