ClawHub
Back to skill

Security audit

Blog Content Processor

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward blog/RSS video preview helper, with only low-level dependency hygiene concerns.

This appears safe to install for its stated purpose, but users who need reproducible or higher-assurance installs should pin dependencies, keep a lockfile, and review the ffmpeg-static package source before relying on it in production.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Unpinned Dependencies

Low
Category
Supply Chain
Content
"author": "Content Team",
  "license": "MIT",
  "dependencies": {
    "rss-parser": "^3.12.0",
    "ffmpeg-static": "^5.1.0"
  },
  "clawhub": {
Confidence
97% confidence
Finding
The dependency uses a caret range (^3.12.0), which allows installation of newer compatible versions rather than a single fixed version. This can reduce build reproducibility and increase supply-chain risk if a future dependency release is compromised or introduces a breaking security issue.

Unpinned Dependencies

Low
Category
Supply Chain
Content
"license": "MIT",
  "dependencies": {
    "rss-parser": "^3.12.0",
    "ffmpeg-static": "^5.1.0"
  },
  "clawhub": {
    "skillType": "content-processor",
Confidence
97% confidence
Finding
The ffmpeg-static dependency is specified with a caret range (^5.1.0), permitting automatic adoption of later patch/minor releases. Because this package delivers platform-specific binaries, unpinned resolution increases supply-chain exposure and can cause non-reproducible builds if an upstream release is malicious or flawed.

Static analysis

No suspicious patterns detected.