Security audit

ClawBuddy Hatchling

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly coherent for ClawBuddy use, but it can send unsanitized question text to the remote service despite claiming outbound content is sanitized.

Install only if you are comfortable with your questions, session metadata, pairing actions, and publication activity going to the ClawBuddy relay. Do not rely on the advertised sanitizer for secrets or personal data, because the raw question can be sent as metadata. Prefer a pinned or manually reviewed install path instead of the unpinned npx examples.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T09 · Insecure Skill Coding Practices

Error

Location: scripts/hatchling.js:244
Finding: Unsanitized Question Content Is Transmitted as the Session Topic
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Warning

Location: README.md:20
Finding: Installation Instructions Execute Unpinned Remote Packages
Content: View full analysis
Remediation: View remediation
install clawbuddy-hatchling npx skills@ add clawbuddy-help/clawbuddy-hatchling ``` 2. Do not use `@latest` in security-sensitive installation documentation. 3. Publish and verify package integrity hashes or signed release artifacts. 4. Document the expected package publisher, registry, exact version, and verification procedure. 5. Use lockfiles and reproducible installation workflows where applicable. 6. Recommend reviewing package metadata and provenance before allowing `npx` to download and execute installer code. 7. Pin the installed Skill to a reviewed commit or immutable release tag rather than a mutable branch or alias. ]]>

SkillSpector

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (48)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 96% confidence
Finding: The description says the skill lets an agent ask questions to buddies, but the documented behavior also includes registration, token storage, pairing, invite workflows, subscription management, and reading publications. This mismatch can mislead users and policy engines about the real trust boundary, causing them to approve a skill that performs account lifecycle and authenticated network actions they did not expect.
Content: No source excerpt is available for this finding.

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 51)May include surrounding context.
md
node scripts/hatchling.js register --name "My Agent" --description "Learning assistant" --emoji "🥚"

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 83)May include surrounding context.
md
node scripts/hatchling.js register --name "My Agent" --description "Learning assistant" --emoji "🥚"

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 84)May include surrounding context.
md
node scripts/hatchling.js register --name "My Agent" --description "Learning assistant" --emoji "🥚"

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 89)May include surrounding context.
md
node scripts/hatchling.js register --name "My Agent" --description "Learning assistant" --emoji "🥚"

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 95)May include surrounding context.
md
node scripts/hatchling.js register --name "My Agent" --description "Learning assistant" --emoji "🥚"

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 110)May include surrounding context.
md
node scripts/hatchling.js register --name "My Agent" --description "Learning assistant" --emoji "🥚"

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 111)May include surrounding context.
md
node scripts/hatchling.js register --name "My Agent" --description "Learning assistant" --emoji "🥚"

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 114)May include surrounding context.
md
node scripts/hatchling.js register --name "My Agent" --description "Learning assistant" --emoji "🥚"

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 117)May include surrounding context.
md
node scripts/hatchling.js register --name "My Agent" --description "Learning assistant" --emoji "🥚"

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 118)May include surrounding context.
md
node scripts/hatchling.js register --name "My Agent" --description "Learning assistant" --emoji "🥚"

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 119)May include surrounding context.
md
node scripts/hatchling.js register --name "My Agent" --description "Learning assistant" --emoji "🥚"

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 126)May include surrounding context.
md
node scripts/hatchling.js register --name "My Agent" --description "Learning assistant" --emoji "🥚"

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 127)May include surrounding context.
md
node scripts/hatchling.js register --name "My Agent" --description "Learning assistant" --emoji "🥚"

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 146)May include surrounding context.
md
node scripts/hatchling.js register --name "My Agent" --description "Learning assistant" --emoji "🥚"

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 147)May include surrounding context.
md
node scripts/hatchling.js register --name "My Agent" --description "Learning assistant" --emoji "🥚"

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 148)May include surrounding context.
md
node scripts/hatchling.js register --name "My Agent" --description "Learning assistant" --emoji "🥚"

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 158)May include surrounding context.
md
node scripts/hatchling.js register --name "My Agent" --description "Learning assistant" --emoji "🥚"

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 164)May include surrounding context.
md
node scripts/hatchling.js register --name "My Agent" --description "Learning assistant" --emoji "🥚"

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 174)May include surrounding context.
md
node scripts/hatchling.js register --name "My Agent" --description "Learning assistant" --emoji "🥚"

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 175)May include surrounding context.
md
node scripts/hatchling.js register --name "My Agent" --description "Learning assistant" --emoji "🥚"

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 191)May include surrounding context.
md
node scripts/hatchling.js register --name "My Agent" --description "Learning assistant" --emoji "🥚"

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 199)May include surrounding context.
md
node scripts/hatchling.js register --name "My Agent" --description "Learning assistant" --emoji "🥚"

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 205)May include surrounding context.
md
node scripts/hatchling.js register --name "My Agent" --description "Learning assistant" --emoji "🥚"

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 214)May include surrounding context.
md
node scripts/hatchling.js register --name "My Agent" --description "Learning assistant" --emoji "🥚"

Static analysis

Detected: suspicious.env_credential_access

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: scripts/hatchling.js:10