ClawHub
Back to skill

Security audit

节点

Security checks for vulnerabilities and agentic risk

Overview

The skill appears intended for Dogecoin node setup and operation, but it requests broad command and file authority while giving vague scope and incomplete safety boundaries.

Review this skill carefully before installing. Use it only in an isolated environment or with explicit prompts that limit what may be changed, and do not allow it to enable RPC, bind services to public interfaces, edit firewall settings, or run privileged commands without direct confirmation.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Intent-Code Divergence

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The skill advertises general exec capability while claiming command execution is limited to a whitelist, but no actual whitelist, allowed command set, or enforcement mechanism is defined anywhere in the file. This can mislead users and downstream agents into overtrusting the skill, increasing the chance of unsafe shell execution, especially in a node-management context where commands commonly affect files, processes, services, and network exposure.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The activation and use description is broad and vague, indicating the skill should be used whenever users need 'node-related functions' without clearly bounding what operations are in scope. In combination with read, write, and exec tools, ambiguous scoping can cause an agent to perform sensitive system, file, or network actions beyond what the user specifically intended.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The skill describes command execution, file handling, and API/network integration, but it does not provide a clear upfront warning that using the skill may modify the filesystem, run system commands, open or interact with network services, or expose RPC endpoints. For a blockchain node skill, these operations are inherently security-sensitive because they can alter host state and increase attack surface if performed without informed user approval.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.