ClawHub
Back to skill

Security audit

Workflow Engine

Security checks for vulnerabilities and agentic risk

Overview

This skill is mostly a queue-orchestration skeleton, but its install instructions ask users to run an unaudited hook installer and enable persistent hooks that the skill says are out of scope.

Review this skill carefully before installing. The queue-orchestration instructions are straightforward, but do not run the workflow-engine installer or enable the listed hooks unless you have independently reviewed the hook implementations, confirmed their source, understand what session data they capture, and know how to disable or remove them.

A.I.G

Vulnerability Patterns
  • System PersistenceInstalls backdoors, hooks, services, or scheduled tasks that survive the run
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)

T08 · Insecure Dependencies

Warning
Location
SKILL.md:66
Finding

Execution of an Unbundled and Unverified Installation Script

Content
View full analysis
Remediation
View remediation

T06 · System Persistence

Warning
Location
SKILL.md:59
Finding

Persistent External Hooks Enabled Despite a Plugin-Free Scope

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

The skill includes shell installation commands (cd workflow-engine, ./install-hooks.sh, and openclaw hooks enable ...) that can modify the local environment, but it does not prominently warn users that these commands perform system or workspace changes. In a security-sensitive setting, undocumented environment-modifying commands increase the risk of users running them without understanding trust boundaries, especially since the file otherwise frames itself as a safe skeleton and explicitly discusses hooks being out of scope.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.