ClawHub
Back to skill

Security audit

Protonvpn Openvpn

Security checks for vulnerabilities and agentic risk

Overview

This VPN management skill is coherent, but it recommends broad passwordless sudo and uses writable /tmp state for privileged network-control commands.

Review the sudo setup before installing. Prefer a tightly scoped root-owned helper or sudoers rules limited to exact OpenVPN config paths and safe disconnect behavior. Be aware that status checks contact ipinfo.io and reveal the active public IP/location metadata to that service.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill instructs users to query ipinfo.io to verify VPN status, which discloses the host's current public IP address, rough geolocation, and request metadata to a third-party service. In a privacy-focused VPN skill, this creates a meaningful privacy leak because verification depends on external network telemetry without an explicit warning or self-hosted/local alternative.

Sudo/Root Execution

Medium
Category
Privilege Escalation
Content
- OpenVPN installed (`openvpn` binary in PATH)
- ProtonVPN config files in `/etc/openvpn/client/`
- Auth credentials file at `/etc/openvpn/client/auth.txt` (chmod 600)
- Passwordless sudo for `openvpn` and `kill` commands (recommended)

## Available Configs
Confidence
92% confidence
Finding
The skill recommends passwordless sudo for openvpn and kill commands, which expands privileged execution surface and can enable abuse if the invoking agent, wrapper commands, or arguments are influenced by untrusted input. Because VPN management necessarily changes system networking, these commands run with elevated privileges and could disrupt connectivity or be repurposed for broader process control.

Sudo/Root Execution

Medium
Category
Privilege Escalation
Content
# Use a state file to track current position: /tmp/vpn-rotation-state

# 3. Connect to next
sudo openvpn --config /etc/openvpn/client/<next>.protonvpn.udp.ovpn --daemon --log-append /tmp/openvpn.log --writepid /tmp/openvpn.pid
sleep 5

# 4. Verify
Confidence
89% confidence
Finding
This command launches OpenVPN via sudo using a variable placeholder (<next>) to select the config, so any unsafe interpolation in an implementation could lead to privileged command misuse or unintended config execution. In context, the skill is operational rather than overtly malicious, but it encourages root-level execution tied to mutable state in /tmp, which increases risk if surrounding automation is not carefully constrained.

Static analysis

No suspicious patterns detected.