ClawHub
Back to skill

Security audit

Kubernetes Backup with Velero

Security checks for vulnerabilities and agentic risk

Overview

This skill provides coherent Kubernetes backup and recovery guidance, with expected access to cluster data and explicitly described scheduled backups.

Use this skill for explicitly requested Kubernetes work. Confirm the target cluster, namespaces, backup destination, and storage permissions before running examples. Backups may contain credentials and application data, so protect storage and encryption settings. Test restores outside production and review any recurring schedule before creating it.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Activation keywords include everyday terms without a Kubernetes-specific constraint.

Medium
Category
Trigger Abuse
Confidence
98% confidence
Finding

The skill explicitly activates when users mention terms such as "protect", "recover", "migrate", or "snapshot", which also occur in unrelated requests. Although the skill is about Kubernetes, these activation instructions do not require Kubernetes context or provide exclusions.

Content

No source excerpt is available for this finding.

Production backup instructions omit a warning about sensitive data being copied to backup storage.

Medium
Category
Output Handling
Confidence
88% confidence
Finding

The workflow instructs the agent to back up the production namespace without warning that namespace backups can include Kubernetes Secrets and other sensitive configuration. The file also shows an AWS-backed Velero installation at line 173, but never explains the privacy implications of copying this data to configured backup storage.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.