ClawHub
Back to skill

Security audit

Cleanup Sessions

Security checks for vulnerabilities and agentic risk

Overview

The skill appears to be for session cleanup, but its documentation gives immediate destructive deletion commands while describing safety checks that those commands do not enforce.

Review the cleanup commands before installing or using this skill. Prefer dry-run or interactive deletion, verify the exact backup directory and file list, and do not assume the documented rm/find examples preserve recent or recoverable session backups unless the command itself enforces that safeguard.

SkillSpector

Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Intent-Code Divergence

Medium
Confidence
93% confidence
Finding
The README advertises a 48-hour protection for session cleanup, but the documented shell commands directly delete backup files based only on filename and age, bypassing the stated safeguard. This mismatch can mislead users into running destructive cleanup commands under the false assumption that recent or active recovery artifacts are protected.

Intent-Code Divergence

Medium
Confidence
96% confidence
Finding
The README states that deletion requires user confirmation, but the provided rm and find examples execute destructive deletion immediately and non-interactively. Users may trust the documented safety claims and accidentally delete recoverable session backups without a review step, causing avoidable data loss.

Static analysis

No suspicious patterns detected.