ClawHub
Back to skill

Security audit

Text Detection

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent guide for AI-text detection tooling, with some ordinary supply-chain and privacy cautions but no hidden or destructive behavior in the artifact.

Before installing, review the referenced npm packages and consider pinning versions or using a lockfile. Do not enable fact-checking API integrations for sensitive documents unless you understand what text is sent and the provider's retention policy.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T08 · Insecure Dependencies

Warning
Location
SKILL.md:20
Finding

Unpinned and Unverified Third-Party npm Dependencies

Content
View full analysis

Vulnerability Details

File Location: SKILL.md:20, SKILL.md:76, SKILL.md:130, SKILL.md:188, and SKILL.md:212
Vulnerability Type: Supply-chain exposure through unpinned third-party dependencies
Risk Level: Medium

Vulnerable Code Snippets

SKILL.md:20

bash
npm install @clawhub/nlp-toolkit

SKILL.md:76

bash
npm install @clawhub/gpt-analyzer

SKILL.md:130

bash
npm install @clawhub/pattern-matcher

SKILL.md:188

bash
npm install @clawhub/text-classifier

SKILL.md:212

bash
npm install @clawhub/hash-toolkit

Technical Analysis

The documentation directs users to install five third-party npm packages without specifying reviewed versions. The project contains no lockfile, integrity hashes, vendored package sources, publisher-verification information, or dependency audit results.

An unqualified npm install resolves package versions from the configured npm registry at installation time. Consequently, the installed content can differ from what was available when this Skill was reviewed. npm packages may also define lifecycle scripts, such as preinstall, install, or postinstall, which npm can execute during installation.

No evidence establishes that the named packages are currently malicious. The vulnerability is the unsafe and unverifiable dependency-installation process, which creates exposure to package compromise, account takeover, dependency confusion, or malicious future releases.

Attack Path

  1. An attacker compromises a referenced package, its publisher account, or the registry resolution path.
  2. The attacker publishes a malicious version under one of the referenced package names.
  3. A user follows SKILL.md and runs the unpinned npm install command.
  4. npm resolves and downloads the attacker-controlled release.
  5. Malicious package code or lifecycle scripts execute with the privileges of the user running ...[truncated 726 chars]
Remediation
View remediation

Remediation Suggestions

  1. Pin every dependency to an explicitly reviewed version rather than allowing npm to resolve the latest release.
  2. Commit a lockfile containing registry URLs and integrity hashes, and use npm ci for reproducible installation.
  3. Verify package ownership, provenance, source repositories, release history, and expected functionality before recommending installation.
  4. Audit package archives, transitive dependencies, and npm lifecycle scripts before approval.
  5. Use npm ci --ignore-scripts where dependency lifecycle scripts are not required.
  6. Run dependency installation in an isolated, least-privileged environment without production credentials or sensitive host mounts.
  7. Enable automated dependency and registry monitoring for compromised or newly malicious releases.
  8. Document trusted registry configuration and prevent fallback to unauthorized registries.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The skill recommends a fact-checking integration that would likely send user-supplied text or extracted claims to external services, but it provides no privacy, consent, retention, or data-handling warning. In a text-analysis skill, inputs may include sensitive documents, proprietary content, or personal data, so omission of these safeguards can lead to unintended data exfiltration or compliance issues.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.