ClawHub
Back to skill

Security audit

Restore And Upscale

Security checks for vulnerabilities and agentic risk

Overview

This skill is a media-restoration guide that is mostly coherent and disclosed, with a minor scope mismatch because it includes video-upscaling instructions despite saying video should use another skill.

Before installing, note that the skill may lead an agent to process videos through a Topaz/Runware workflow even though the manifest says video belongs in a separate skill. For still-image restoration and upscaling, the behavior is disclosed and purpose-aligned; review provider data handling for any sensitive personal photos or videos.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Description-Behavior Mismatch

Medium
Category
Not specified by scanner
Confidence
98% confidence
Finding

The manifest explicitly states 'For video, use video-upscale,' which narrows this skill to still-image restoration and upscaling. However, this file documents an end-to-end 'Video upscale' path using Topaz and presents it as one of the skill's main recipes, expanding behavior beyond the stated scope.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Low
Category
Not specified by scanner
Confidence
89% confidence
Finding

The introductory text says the file covers 'the main paths' for the skill and then lists 'a video upscale' alongside still-image flows. That documentation conflicts with the manifest's instruction that video belongs to a different skill, creating an intent/documentation divergence about what this skill is supposed to handle.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.