ClawHub
Back to skill

Security audit

流程管理器(专业版)

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Node-RED operations manager, but it gives agents broad production-impacting command authority without consistently requiring user confirmation or scoped safeguards.

Install only if you intend to let an agent help administer Node-RED and Docker environments. Before use, restrict it to approved instances, require explicit confirmation for production changes, prefer dry-run/diff flows before sync or rollback, and protect backups because they may contain secrets.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The description contains broad activation language for monitoring, logging, alerting, and deployment-management use cases without narrowing scope, approval requirements, or environment constraints. In a skill that exposes read/exec/write tools and manages production Node-RED instances, vague trigger criteria can cause the agent to engage high-impact operational capabilities on loosely related user requests.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The agent integration section explicitly states that the Agent can drive this skill through natural-language instructions, which encourages unrestricted invocation of sensitive multi-instance management, deployment, rollback, Docker, and recovery operations. When combined with exec/write capabilities, this raises the risk of prompt-triggered destructive actions, environment changes, or production-impacting automation without structured authorization.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

This section documents numerous destructive or high-impact commands such as instance removal, restore, Docker stop/restart/scale, batch remove/upgrade/disable, rollback, and recovery trigger, but does not consistently present explicit production warnings, safety interlocks, or confirmation requirements. In the context of enterprise Node-RED administration, these actions can cause outages, data loss, configuration drift, or unauthorized deployment changes if triggered by mistake or adversarial prompting.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.