ClawHub
Back to skill

Security audit

Qjzd Nav Cli Operations

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward QJZD Nav CLI helper, but its backup delete and import examples should be used carefully because they can change or remove site data.

Install only if you intend to let the agent manage QJZD Nav backups and settings through the qjzd-nav CLI. Before delete or import operations, ask the agent to list backups, identify the exact target file, make a fresh export when appropriate, and get explicit confirmation.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill documents a destructive `backup delete` operation with no warning, confirmation step, or guidance to verify the target filename before execution. In an agentic or automation context, this increases the chance of accidental deletion of backups, reducing recovery options and potentially amplifying the impact of later operational mistakes or incidents.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill describes `backup import` without warning that importing data may overwrite, replace, or materially alter current site configuration and content. In a CLI operations skill, this omission is dangerous because an agent may perform a restore-like action without making the user aware of data integrity risks or taking a precautionary backup first.

Static analysis

No suspicious patterns detected.