ClawHub
Back to skill

Security audit

Bazzite Sweet — Bazzite Setup, Steam Deck, Flatpak, uBlue

Security checks for vulnerabilities and agentic risk

Overview

This skill is a Bazzite Linux reference guide with system-maintenance commands that are visible, purpose-aligned, and user-run rather than hidden or automatic.

Install only if you want a Bazzite-focused command reference. Before running commands from it, review any rpm-ostree, reboot, rebase, cleanup, sudo mount, screenshot, or recording command because those can affect system state or capture visible private information.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The markdown includes commands that immediately apply system updates and reboot the machine, and elsewhere documents package layering, rebasing, rollback, cleanup, and mounting operations. These actions can affect system state, availability, or installed packages, but the skill description does not provide explicit warnings about rebooting, data loss risk, or verifying commands before execution.

Content

No source excerpt is available for this finding.

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
70% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 316)May include surrounding context.

md
| Display wrong resolution | `kscreen-doctor --outputs` (KDE) |
| Steam Deck won't enter Game Mode | Check `systemctl --user status` for errors |
| Package conflict after layering | `rpm-ostree override replace <url>` |
| SD card not mounting | `lsblk` then `sudo mount /dev/mmcblk0p1 /run/media/deck/sd` |
| Controller not detected | `evtest` + check `steam-input` service |
| Wayland app blurry | Check fractional scaling, try integer scale |

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
89% confidence
Finding

The markdown provides direct commands for taking screenshots and recording the screen, which may capture sensitive user data visible on the desktop. There is no warning reminding users to review visible content before capture or sharing.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.