ClawHub
Back to skill

Security audit

Product Hunt Launch

Security checks for vulnerabilities and agentic risk

Overview

This Product Hunt launch skill is mostly coherent, but it asks users to run mutable remote installer and unpinned installation commands that can execute code on their machine.

Review carefully before installing. Prefer manual download and independent verification of the inference.sh CLI, avoid `curl | sh`, do not run the optional unpinned `npx skills add` commands unless you trust and review those packages, and avoid sending confidential launch plans, unreleased product details, customer names, or credentials in image prompts or search queries.

A.I.G

Vulnerability Patterns
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (2)

T03 · Remote Payload Retrieval and Execution

Error
Location
SKILL.md:14
Finding

Unverified Remote Installer Piped Directly into a Shell

Content
View full analysis
Remediation
View remediation
/infsh-.tar.gz printf '%s %s\n' '' 'infsh.tar.gz' | sha256sum --check - ``` 5. Prefer cryptographic signature verification using a documented, pinned public key over an unauthenticated checksum alone. 6. Let users inspect downloaded installation scripts or binaries before installation. 7. Install only into a user-controlled directory without `sudo`, startup services, or background processes. 8. Keep installation and authentication as separate, explicit operations. Do not automatically invoke `infsh login` after running installation code. 9. Document what information the login process transmits and where credentials or tokens are stored. ]]>

T08 · Insecure Dependencies

Warning
Location
SKILL.md:253
Finding

Unpinned Third-Party Skill Installation Through npx

Content
View full analysis
Remediation
View remediation
add ``` 3. Pin every external Skill to an immutable, reviewed commit or release identifier rather than a mutable name or branch. 4. Verify package integrity using a lockfile, trusted registry integrity metadata, and independently published checksums or signatures where supported. 5. Review the complete dependency tree and the contents of each external Skill before recommending installation. 6. Prefer a locally installed, previously verified CLI over on-demand `npx` execution. 7. Run installation in a restricted environment without sensitive environment variables, unnecessary filesystem access, or elevated privileges. 8. Establish a repeatable update-review process instead of silently tracking the latest external package or Skill content. ]]>

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (8)

External Script Fetching

High
Category
Supply Chain
Confidence
98% confidence
Finding

curl ... | sh executes a remote script directly from the network, creating a classic supply-chain and remote code execution risk. Even with the nearby note claiming checksum verification, users are still instructed to trust and execute an unaudited bootstrap script before reviewing its contents; if the host, CDN, TLS path, or script source is compromised, arbitrary code could run on the user's machine.

Content

Scanner excerpt · SKILL.md (reported line 14)May include surrounding context.

Quick Start

bash
curl -fsSL https://cli.inference.sh | sh && infsh login

# Generate gallery hero image
infsh app run falai/flux-dev-lora --input '{

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The manifest description lists generic triggers such as "launch strategy," "product launch," and "startup launch" without narrowing them to Product Hunt context. These phrases are broad enough to match ordinary discussion about launches and could cause unintended invocation outside the intended domain.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
87% confidence
Finding

The image-generation examples transmit prompt content to an external service without clearly disclosing that prompts may contain sensitive product information. In this context, users preparing unreleased launches may include proprietary screenshots, roadmap details, or messaging that should not be sent to third parties by default.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
87% confidence
Finding

These examples send search queries to external services (tavily/search-assistant, later exa/search) without a clear privacy disclosure. If users include confidential launch plans, customer names, internal product details, or unreleased strategy in queries, that data may be transmitted to third-party providers unexpectedly.

Content

No source excerpt is available for this finding.

Rp1

Medium
Category
MCP Rug Pull
Confidence
70% confidence
Finding

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Content

No source excerpt is available for this finding.

Rp1

Medium
Category
MCP Rug Pull
Confidence
70% confidence
Finding

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Content

No source excerpt is available for this finding.

Rp1

Medium
Category
MCP Rug Pull
Confidence
70% confidence
Finding

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
78% confidence
Finding

The skill mandates launch timing in Pacific Time and frames 12:01 AM PT as the recommended schedule. This is a locale-specific instruction presented as a default without explicitly offering adaptation for the user's region or clarifying that it is specific to Product Hunt's platform timing rules.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.