Komodo

• Outcome: Review
• Latest audit: Sep 11, 2026 · 7:35 AM UTC
• Version: 1.0.0

Overview

This skill does what it says for Komodo infrastructure management, but it needs Review because it handles powerful API credentials without enforcing HTTPS and may print secret configuration values.

Install only if you are comfortable giving this skill Komodo infrastructure-management authority. Use a narrowly scoped Komodo API key, set KOMODO_URL to an HTTPS endpoint you control, avoid passing secrets in JSON arguments unless output is protected, and review any deploy, run, update, or destroy command before execution.

A.I.G

Vulnerability Patterns

• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (2)

T09 · Insecure Skill Coding Practices

Error

• Location: openclaw.ts:3

Finding

Komodo API Credentials Can Be Transmitted over Plaintext HTTP

Content

View full analysis

new Promise(async (res, rej) => { try { let response = await fetch(`${url}${path}/${type}`, { method: "POST", body: JSON.stringify(params), headers: { ...state.jwt ? { authorization: state.jwt } : state.key && state.secret ? { "x-api-key": state.key, "x-api-secret": state.secret } : {}, "content-type": "application/json" } }); ``` ### Technical Analysis `KOMODO_URL` is accepted directly from the environment without parsing its scheme or requiring HTTPS. Although the documentation gives HTTPS examples, the implementation also accepts an address beginning with `http://`. Every API request includes the API key and secret in request headers. If the configured endpoint uses HTTP, both credentials and infrastr ...[truncated 1736 chars]

Remediation

View remediation

T09 · Insecure Skill Coding Practices

Warning

• Location: src/create.ts:33

Finding

Resource Configurations Are Printed without Secret Redaction

Content

View full analysis

| undefined; if (jsonConfig) { try { config = JSON.parse(jsonConfig); } catch { console.error("Invalid JSON config:", jsonConfig); process.exit(1); } } const resourceType = type as ResourceType; console.log(`Creating ${type} "${name}"...`); if (config) console.log("Config:", JSON.stringify(config, null, 2)); ``` `src/update.ts`: ```typescript let config: Record; try { config = JSON.parse(jsonPatch); } catch { console.error("Invalid JSON patch:", jsonPatch); process.exit(1); } ``` ```typescript const id = await resolveId(); console.log(`Updating ${type} "${name}" (${id})...`); console.log("Patch:", JSON.stringify(config, null, 2)); ``` The invalid-JSON error paths also print the complete unparsed argument: ```typescript console.error("Invalid JSON config:", jsonConfig); console.error("Invalid JSON patch:", jsonPatch); ``` ### Technical Analysis Both resource-management commands accept arbitrary JSON configuration and print the entire value without inspecting or redacting sensitive fields. Komodo resource configurations may include environment variables, access tokens, registry credentials, passwords, private repository credentials, or other deployment secrets. Console output may be retained by CI systems, Agent transcripts, shell redirection, centralized log collectors, terminal recording, or automation platforms. Therefore, values intended only for Komodo Core can be disclosed to additional parties and systems. The issue applies both to valid JSON and to malformed input because parsing errors echo the original argument. ### ...[truncated 1150 chars]

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (49)

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · .gitignore (reported line 19)May include surrounding context.

text

report.[0-9]_.[0-9]_.[0-9]_.[0-9]_.json

# dotenv environment variable files
.env
.env.development.local
.env.test.local
.env.production.local

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · .gitignore (reported line 23)May include surrounding context.

text

.env.development.local
.env.test.local
.env.production.local
.env.local

# caches
.eslintcache

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 32)May include surrounding context.

md

node scripts/list.js <type>

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 50)May include surrounding context.

md

node scripts/create.js <type> <name> [json-config]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 56)May include surrounding context.

md

node scripts/create.js <type> <name> [json-config]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 57)May include surrounding context.

md

node scripts/create.js <type> <name> [json-config]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 58)May include surrounding context.

md

node scripts/create.js <type> <name> [json-config]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 59)May include surrounding context.

md

node scripts/create.js <type> <name> [json-config]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 60)May include surrounding context.

md

node scripts/create.js <type> <name> [json-config]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 61)May include surrounding context.

md

node scripts/create.js <type> <name> [json-config]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 73)May include surrounding context.

md

node scripts/update.js <type> <name> '<json>'

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 77)May include surrounding context.

md

node scripts/update.js <type> <name> '<json>'

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 78)May include surrounding context.

md

node scripts/update.js <type> <name> '<json>'

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 79)May include surrounding context.

md

node scripts/update.js <type> <name> '<json>'

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 80)May include surrounding context.

md

node scripts/update.js <type> <name> '<json>'

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 81)May include surrounding context.

md

node scripts/update.js <type> <name> '<json>'

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 82)May include surrounding context.

md

node scripts/update.js <type> <name> '<json>'

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 94)May include surrounding context.

md

node scripts/run.js <type> <name>

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 98)May include surrounding context.

md

node scripts/run.js <type> <name>

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 99)May include surrounding context.

md

node scripts/run.js <type> <name>

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 100)May include surrounding context.

md

node scripts/run.js <type> <name>

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 110)May include surrounding context.

md

node scripts/deploy-stack.js <stack-name>

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 118)May include surrounding context.

md

node scripts/stack-ctrl.js <action> <stack-name>

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 128)May include surrounding context.

md

node scripts/deployment-ctrl.js <action> <deployment-name>

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 138)May include surrounding context.

md

node scripts/get-logs.js stack <stack-name> [tail]

Static analysis

Detected: suspicious.env_credential_access

Environment variable access combined with network send.

Critical

• Code: suspicious.env_credential_access
• Location: scripts/create.js:905

Environment variable access combined with network send.

Critical

• Code: suspicious.env_credential_access
• Location: scripts/deploy-stack.js:905

Environment variable access combined with network send.

Critical

• Code: suspicious.env_credential_access
• Location: scripts/deployment-ctrl.js:905

Environment variable access combined with network send.

Critical

• Code: suspicious.env_credential_access
• Location: scripts/get-logs.js:905

Environment variable access combined with network send.

Critical

• Code: suspicious.env_credential_access
• Location: scripts/index.js:905

Environment variable access combined with network send.

Critical

• Code: suspicious.env_credential_access
• Location: scripts/list.js:905

Environment variable access combined with network send.

Critical

• Code: suspicious.env_credential_access
• Location: scripts/run.js:905

Environment variable access combined with network send.

Critical

• Code: suspicious.env_credential_access
• Location: scripts/stack-ctrl.js:905

Environment variable access combined with network send.

Critical

• Code: suspicious.env_credential_access
• Location: scripts/update.js:905