ClawHub
Back to skill

Security audit

ORBCAFE Kanban + Detail

Security checks for vulnerabilities and agentic risk

Overview

This skill appears to be straightforward ORBCAFE Kanban UI guidance, with the main caution being ordinary npm dependency-install risk.

Before installing, review and pin the npm dependencies in your own package manifest, use a lockfile or npm ci where possible, and run installation in a normal least-privileged development environment.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T08 · Insecure Dependencies

Warning
Location
SKILL.md:18
Finding

Mandatory Installation of Unpinned Third-Party Dependencies

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

This markdown file contains core workflow and verification instructions only in Chinese, which effectively forces a specific language for users following the skill. The policy allows locale constraints only when documented and justified, or when the user is given a language choice, neither of which appears here.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.