ClawHub
Back to skill

Security audit

Domain Dns Ops

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed DNS operations helper, but users should treat its Cloudflare and registrar commands as live production changes.

Install only if you intend this agent to help manage Peter's live domains. Before applying nameserver, redirect, Worker route, or bot-protection changes, confirm the exact domain, registrar, target URL, current DNS/mail dependencies, and rollback path.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

Changing registrar nameservers is a live cutover step that can disrupt DNS resolution, email delivery, and web traffic if performed on the wrong domain or before the target zone is fully configured. In this skill, the instruction is operationally powerful and lacks an explicit confirmation gate, rollback guidance, or warning about propagation and outage risk, which makes accidental misuse materially dangerous.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

Deploying redirects, rulesets, or worker routes can immediately change how live domains respond, potentially redirecting users incorrectly, causing outages, or breaking application flows. The skill presents these actions as routine steps without an explicit warning, approval requirement, or staged validation, increasing the chance of harmful production changes.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

Disabling Cloudflare 'Block AI bots' reduces a protective control and may increase scraping, abuse, and unwanted automated access. Because the skill exposes a direct command to disable this setting without explaining the security tradeoff or requiring explicit authorization, it can lead to inadvertent weakening of protections.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.