ClawHub
Back to skill

Security audit

ssh-tunnel-swarm

Security checks for vulnerabilities and agentic risk

Overview

The skill’s SSH tunneling behavior is clearly described, but its install instructions run an unpinned remote GitHub script directly in bash, which needs review before use.

Review or avoid the one-line remote installer. Prefer cloning the repository or downloading a pinned release, inspect the script before running it, and only create tunnel rules for hosts and services you trust, especially when using reverse tunnels.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
98% confidence
Finding
The documentation instructs users to fetch a remote script over the network and execute it immediately with `bash`, which removes any opportunity to inspect, verify, or pin the downloaded content first. If the GitHub account, repository, branch, transport path, or upstream script is ever compromised, users could execute attacker-controlled code during installation.

Static analysis

No suspicious patterns detected.