Super Auto Updater Hold

• Outcome: Review
• Latest audit: Jun 30, 2026 · 2:07 PM UTC
• Version: 1.0.0

Overview

This skill openly sets up daily unattended updates for Clawdbot and all installed skills, which is useful but high-impact enough to require careful review.

Install only if you intentionally want unattended daily updates. Prefer using the dry-run command first, limiting updates to trusted skills where possible, choosing your own schedule and timezone, and keeping a rollback plan for Clawdbot and skill versions.

SkillSpector

Vulnerability Patterns

• Rogue Agent: Self-Modification, Session Persistence
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill explicitly instructs users to configure unattended daily updates for both the core tool and all installed skills, which can modify software and dependencies without per-run user review. While this appears intended for convenience rather than abuse, automatic update execution increases supply-chain and operational risk because registry compromise, a bad release, or incompatible update could be applied silently on a schedule.

Natural-Language Policy Violations

Low

• Confidence: 84% confidence
• Finding: The example cron command hard-codes the timezone to America/Los_Angeles, which may cause updates to run at unexpected local times for other users. In the context of unattended updates, this can make behavior less predictable and slightly increase operational risk, though it is not directly a security exploit by itself.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The guide explicitly instructs users to configure unattended daily updates for both the core tool and all skills, including automatic application of changes via package managers and `clawdhub update --all`. Even if intended for maintenance, this creates a supply-chain and stability risk because unreviewed code changes can be pulled and applied automatically without approval, rollback guidance, or integrity safeguards.

Self-Modification

High

• Category: Rogue Agent

Content

# Capture new version
CLAWDBOT_VERSION_AFTER=$(clawdbot --version 2>/dev/null || echo "unknown")

# Update skills
log "Updating skills via ClawdHub..."
SKILL_OUTPUT=$(clawdhub update --all 2>&1) || true
echo "$SKILL_OUTPUT" >> "$LOG_FILE"

• Confidence: 97% confidence
• Finding: The `clawdhub update --all` instruction causes the agent to self-modify its available skills by fetching and applying remote updates automatically. In an agent-skill context, this is particularly dangerous because it expands the trusted codebase without human review and could introduce malicious or breaking behavior through a compromised repository, dependency, or publisher account.

Static analysis

No suspicious patterns detected.