ClawHub
Back to skill

Security audit

Alephnet Node Manager

Security checks for vulnerabilities and agentic risk

Overview

This node-management skill is mostly coherent, but it requests broad command and file access while documenting token-transfer, staking, persistent memory, and agent orchestration actions under an overly broad activation description.

Install only if you intend to let the agent manage AlephNet nodes and related wallet or memory operations. Keep API keys scoped, review any generated shell commands before execution, require explicit confirmation for send/stake/write operations, and avoid using the skill for generic AI chat or unrelated coding tasks.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

High
Confidence
96% confidence
Finding
The activation description is so broad that it can cause the skill to trigger for generic AI tasks unrelated to node management. In a skill that exposes read/write/exec capabilities, overbroad activation increases the chance that routine user prompts are silently routed into a privileged workflow, leading to unintended command execution, file changes, or sensitive operations.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill describes command execution, file writing, and token-transfer actions without prominent, operation-specific warnings or consent requirements. Because the skill also advertises exec and write tools, a user could be led into impactful or irreversible actions—such as modifying files, running shell commands, or transferring assets—without sufficient friction, verification, or risk disclosure.

Static analysis

No suspicious patterns detected.