ClawHub
Back to skill

Security audit

Reelary NLE Export

Security checks for vulnerabilities and agentic risk

Overview

The skill exports a selected video project as described, with a dependency risk in its optional command-line fallback.

Prefer a trusted, version-pinned Reelary installation for the command-line fallback. Exported timelines reference your original media, so keep those files available. The referenced setup and rough-cut skills were not included and are outside this review.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

MCP server referenced without pinned version: 'npx -y reelary'.

Medium
Category
MCP Rug Pull
Confidence
97% confidence
Finding

The fallback command uses npx -y reelary without a version pin, allowing npm to fetch and execute a changing package version while suppressing the installation confirmation. If the package or its publishing account is compromised, this can execute attacker-controlled code with the agent's local permissions, potentially exposing original footage and other accessible files; the legitimate export purpose and fallback-only placement reduce exposure but do not remove the supply-chain risk.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.