ClawHub
Back to skill

Security audit

GitFlow

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward Git/CI helper skill that discloses its remote push and pipeline-monitoring behavior, with no bundled executable code or hidden actions.

Install only if you want an agent to help with git pushes and CI/CD monitoring. Review remotes and branches before using pushflow, because it can send commits to GitHub or GitLab, trigger pipelines, consume CI resources, and expose logs or build status through the configured CLI tools.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill explicitly promotes automatically pushing local commits and triggering remote CI/CD pipelines, which are state-changing actions against external systems. While this is expected functionality for a DevOps skill, the documentation does not warn users that invoking the skill may transmit local code, trigger builds/deployments, consume CI resources, or expose sensitive changes to remote repositories.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The documented pushflow alias performs git push to a remote and then automatically queries GitHub or GitLab, but the surrounding documentation does not clearly warn that local commits will be sent to external hosts. This can lead to unintended publication of code, accidental triggering of CI/CD jobs, and possible leakage of sensitive repository metadata or logs through subsequent monitoring commands.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.