ClawHub
Back to skill

Security audit

Bluebubbles Hardened

Security checks for vulnerabilities and agentic risk

Overview

This is a markdown-only development skill for a BlueBubbles messaging plugin, with sensitive messaging and credential behavior disclosed and bounded by relevant guardrails.

Install this only if you want an agent to help develop or maintain a BlueBubbles/iMessage bridge. Keep the BlueBubbles password in secure configuration, review generated code before deployment, and preserve the documented safeguards for attachment paths, URL construction, message relays, webhook handling, and credential logging.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.