ClawHub
Back to skill

Security audit

MongoDB Admin Toolkit

Security checks for vulnerabilities and agentic risk

Overview

This MongoDB admin skill is a plain reference, but it includes irreversible database, access-control, and replica-set commands without enough safety guardrails.

Review this skill carefully before installing it for production use. Use it only with explicit operator confirmation for destructive or topology-changing commands, verify the active connection string and database first, take fresh backups or config exports, and prefer test or temporary databases for restore/import/repair workflows.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill includes destructive commands such as dropping databases and collections without any cautionary language, confirmation steps, or guidance to verify the target environment first. In an agent-assisted context, these examples could be copied or suggested directly against production systems, increasing the risk of accidental irreversible data loss.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
Restore, import, and repair commands can overwrite, alter, or duplicate existing data, yet the skill presents them as routine steps without warning about preconditions or rollback planning. In operational use, this can lead to accidental corruption, unexpected merges, or restoration into the wrong database, especially when used by an automated agent or less experienced operator.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
User-management and replica-set administration commands can change privileges, revoke access, force topology changes, or trigger service disruption, but the skill does not warn about lockout or availability risks. Commands like role changes, user deletion, step-down, member removal, and forced reconfiguration are particularly dangerous in production and may cause outages or loss of administrative access if applied incorrectly.

Static analysis

No suspicious patterns detected.