ClawHub
Back to skill

Security audit

Fnnas Fpk Development

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent development guide for building and testing FNNAS/fnOS FPK apps; its commands can change a NAS or publish software, but that is expected for the stated purpose and is mostly documented.

Install this skill only if you are developing FNNAS/fnOS FPK applications. Treat any appcenter-cli install, manual-install, fnpack build, publish/upload, root permission, or global npm install step as a real system-changing action: use a test NAS, review permissions and package provenance, avoid root unless necessary, and keep rollback/backups for important data.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
95% confidence
Finding
The trigger and read_when conditions are broad enough to activate on many general fnOS/FPK-related conversations, potentially causing the skill to inject procedural guidance when the user did not explicitly request it. In a skill that includes packaging, installation, and publishing workflows, unintended activation increases the chance of unreviewed operational or system-modifying instructions being surfaced inappropriately.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill provides direct commands to build, locally install, install packaged artifacts, and upload applications, but it does not prominently warn that these actions modify the local NAS/application environment and may affect running services or publish artifacts externally. This is risky because users may execute commands that install untrusted packages, alter system state, or release software without sufficient review or rollback planning.

Static analysis

Detected: suspicious.generated_source_template_injection

User-controlled placeholder is embedded directly into generated source code.

Critical
Code
suspicious.generated_source_template_injection
Location
references/ALL_DOCS.md:2005