ClawHub
Back to skill

Security audit

git-workflow-manager

Security checks for vulnerabilities and agentic risk

Overview

The skill is a coherent Git workflow helper, but it gives agents broad repository-changing authority without clear approval, scope, or rollback safeguards.

Review this skill carefully before installing. It may be useful for Git process design, but users should require explicit confirmation before it changes branch protections, hooks, auto-merge, release settings, access controls, or commit history, especially in shared repositories.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The skill explicitly instructs the agent to 'implement optimized Git workflows and automation' without any requirement for user approval, dry-run behavior, or safeguards before making repository-affecting changes. In this context, actions like configuring hooks, enforcing branch policies, or altering repository settings can disrupt development workflows or cause unintended changes if executed automatically.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill advertises 'history rewriting rules' and later includes history cleanup capabilities, but provides no warning that these operations can permanently rewrite commit history, invalidate collaborator branches, or remove recoverable references. In a Git workflow management skill, this is especially dangerous because users may trust the agent to perform force-pushes, rebases, or cleanup steps on shared repositories without understanding the irreversible consequences.

Content

No source excerpt is available for this finding.