T09 · Insecure Skill Coding Practices
Error
- Location
scripts/upscale_video.sh:134- Finding
Command Injection Through an Unsafe EXIT Trap
- Content
View full analysis
- Remediation
View remediation
Security audit
AI Video Upscale
Security checks for vulnerabilities and agentic risk
Overview
This video upscaling skill has a coherent purpose, but its shell script and install steps create review-worthy local execution and supply-chain risks.
Install only if you are comfortable running third-party native video tools locally. Before use, fix or avoid the job_id trap issue, restrict activation to explicit video requests, and verify downloaded Real-ESRGAN and Waifu2x archives with trusted hashes or signatures.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)
T08 · Insecure Dependencies
Warning
- Location
references/INSTALL.md:13- Finding
Downloaded Native Executables Are Not Integrity-Verified
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Rogue AgentSelf-Modification, Session Persistence
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)
Vague Triggers
High
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The manifest trigger phrases are broad, generic terms like "upscale," "enhance," and "improve quality" that can match many ordinary user requests without clearly constraining invocation to video-processing contexts. This increases the chance of accidental or inappropriate activation, which could cause the agent to route unrelated content or files into an external media-processing workflow unexpectedly.
- Content
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The example prompts reinforce ambiguous activation behavior by using short, generic phrases like "Upscale this" and "Make this 4K" without clarifying that the target must be a video input. In isolation these phrases are common conversational requests, so they can contribute to over-triggering and accidental invocation of the skill.
- Content
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The trigger list includes generic phrases such as "upscale," "enhance," and "improve quality," which can match many ordinary user requests outside the narrow intent of video upscaling. This raises the chance of unintended skill invocation, causing the agent to route unrelated prompts into a tool that may consume resources, mishandle user intent, or produce unsafe side effects in the wrong context.
- Content
Session Persistence
Medium
- Category
- Rogue Agent
- Confidence
- 60% confidence
- Finding
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
- Content
Waifu2x (recommended for anime)
bash mkdir -p ~/video-tools/waifu2x-ncnn-vulkan cd ~/video-tools/waifu2x-ncnn-vulkan curl -L -o waifu2x.zip "https://github.com/nihui/waifu2x-ncnn-vulkan/releases/download/20220728/waifu2x-ncnn-vulkan-20220728-ubuntu.zip" unzip waifu2x.zip
Session Persistence
Medium
- Category
- Rogue Agent
- Confidence
- 90% confidence
- Finding
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
- Content
Set these to point to your tool locations:
bash # Add to ~/.bashrc or ~/.zshrc export VIDEO_UPSCALE_REALESRGAN="$HOME/video-tools/real-video-enhancer" export VIDEO_UPSCALE_WAIFU2X="$HOME/video-tools/waifu2x-ncnn-vulkan/waifu2x-ncnn-vulkan-20220728-ubuntu" export VIDEO_UPSCALE_CACHE="$HOME/.openclaw/cache/video-upscale"
Static analysis
No suspicious patterns detected.