ClawHub
Back to skill

Security audit

alibabacloud-pcap-analyzer

Security checks for vulnerabilities and agentic risk

Overview

This skill is a local packet-capture analyzer with expected, disclosed file reading and optional report writing, but users should choose output paths carefully.

Install and run this only on pcap files you intentionally provide. Prefer a virtual environment for Scapy, avoid analyzing captures from untrusted sources on sensitive machines, and use a fresh report filename because --output can overwrite an existing file.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
89% confidence
Finding
The skill declares itself as read-only and no-credentials, but the documented behavior includes writing a Markdown report via `--output` and installing/using external tooling (`pip3 install scapy`), which creates a mismatch between declared permissions and actual capabilities. This is dangerous because permissionless file-write or package/network behavior can bypass platform trust controls, increasing the blast radius if the implementation is changed, compromised, or invoked with attacker-controlled paths.

Missing User Warnings

Low
Confidence
81% confidence
Finding
The script opens the user-supplied output path with `open(args.output, "w", encoding="utf-8")`, which will create or truncate files without any warning, confirmation, or existence check. In an agent/skill context, this can cause unintended data loss or overwrite sensitive local files if the output path is influenced by a user prompt, automation, or path confusion.

Known Vulnerable Dependency: scapy==2.5 — 1 advisory(ies): GHSA-cq46-m9x9-j8w2 (Scapy Session Loading Vulnerable to Arbitrary Code Execution via Untrusted Pickl)

Low
Category
Supply Chain
Confidence
85% confidence
Finding
The requirement range `scapy>=2.5,<3` permits installation of Scapy 2.5.x, and the referenced advisory indicates arbitrary code execution risk when loading untrusted pickled session data. In a pcap-analysis skill, analysts may process attacker-supplied network artifacts, which increases the danger if the toolchain or workflow uses the affected session-loading functionality anywhere in analysis or supporting scripts.

Static analysis

No suspicious patterns detected.