ClawHub
Back to skill

Security audit

supervisor-config-gen

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed Supervisor config generator with install-time supply-chain cautions, but the reviewed artifact does not show hidden, destructive, or deceptive behavior.

Before installing, review the downloaded script or pin it to a trusted commit because the setup pulls from GitHub `master`. Avoid the sudo install unless you need all users to run it, back up any existing generated config before rerunning, and inspect the app’s `run.sh` before handing the generated config to Supervisor.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (4)

Ae1

High
Category
analysis-evasion
Confidence
100% confidence
Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 93)May include surrounding context.

md
For install steps and the full field reference, see `references/setup.md`.

YARA rule 'backdoor_persistence': Backdoor persistence with malicious payloads (shell commands, SSH key injection, hidden root users) [malware]

High
Category
YARA Match
Confidence
75% confidence
Finding

YARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).

Content

Scanner excerpt · references/setup.md (reported line 36)May include surrounding context.

users (requires root)

shell
sudo mv supervisor-config-gen /usr/local/bin/

Install for the current user only

shell
mkdir -p ~/bin
mv supervisor-config-gen ~/bin/

Then make sure $HOME/bin is on $PATH:

shell
echo $PATH | grep -q "$HOME/bin" && echo "already in PATH" || echo "not in PATH yet"

If not in $PATH, add it (bash: ~/.bashrc, zsh: ~/.zshrc):

shell
echo 'export PATH="$HOME/bin:$PATH"' >> ~/.bashrc
source ~/.bashrc

Prerequisites

  • Bash shell on the machine running the script.
  • The target app directory MUST contain a run.sh executable — the script hardcodes command=<dir>/run.sh into the generated config without checking it exists. If there's no run.sh, the generated config will reference a missing file and Supervisor will fail to start the program.

Full input reference

There are no CLI flags, positional args, or environment variables. The script (supervisor-config-gen, a single bash file, no subcommands) takes

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · references/setup.md (reported line 17)May include surrounding context.

Install for all users (requires root)

shell
sudo mv supervisor-config-gen /usr/local/bin/

Install for the current user only

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · references/setup.md (reported line 43)May include surrounding context.

md
## Prerequisites

- Bash shell on the machine running the script.
- The target app directory MUST contain a `run.sh` executable — the script hardcodes `command=<dir>/run.sh` into the generated config without checking it exists. If there's no `run.sh`, the generated config will reference a missing file and Supervisor will fail to start the program.

## Full input reference

Static analysis

No suspicious patterns detected.