ClawHub
Back to skill

Security audit

流程管理器(专业版)

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Node-RED operations manager, but it gives agents broad production-impacting command authority without consistently requiring user confirmation or scoped safeguards.

Install only if you intend to let an agent help administer Node-RED and Docker environments. Before use, restrict it to approved instances, require explicit confirmation for production changes, prefer dry-run/diff flows before sync or rollback, and protect backups because they may contain secrets.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The description contains broad activation language for monitoring, logging, alerting, and deployment-management use cases without narrowing scope, approval requirements, or environment constraints. In a skill that exposes read/exec/write tools and manages production Node-RED instances, vague trigger criteria can cause the agent to engage high-impact operational capabilities on loosely related user requests.

Vague Triggers

Medium
Confidence
95% confidence
Finding
The agent integration section explicitly states that the Agent can drive this skill through natural-language instructions, which encourages unrestricted invocation of sensitive multi-instance management, deployment, rollback, Docker, and recovery operations. When combined with exec/write capabilities, this raises the risk of prompt-triggered destructive actions, environment changes, or production-impacting automation without structured authorization.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
This section documents numerous destructive or high-impact commands such as instance removal, restore, Docker stop/restart/scale, batch remove/upgrade/disable, rollback, and recovery trigger, but does not consistently present explicit production warnings, safety interlocks, or confirmation requirements. In the context of enterprise Node-RED administration, these actions can cause outages, data loss, configuration drift, or unauthorized deployment changes if triggered by mistake or adversarial prompting.

Static analysis

No suspicious patterns detected.