ClawHub
Back to skill

Security audit

统一仪表盘专业版

Security checks for vulnerabilities and agentic risk

Overview

This operations dashboard skill is not malicious, but it asks for command execution and automatic operational actions without enough scoping or confirmation safeguards.

Install only if you intend to give this skill operational command authority. Before use, require confirmation for service startup, deployment actions, webhook callbacks, and batch operations; bind dashboards to localhost with authentication; limit targets explicitly; and avoid sharing or storing API keys unless the storage mechanism is clear.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Vague Triggers

Medium
Confidence
91% confidence
Finding
The skill description says to use it whenever users need monitoring, log analysis, alerting, or deployment management, which is broad enough to match many ordinary requests. In agent environments, overly broad activation criteria can cause the skill to run unexpectedly and gain access to powerful tools like exec, grep, and read in situations where the user did not intend that behavior.

Vague Triggers

Medium
Confidence
90% confidence
Finding
The usage guidance states that natural-language instructions can trigger operations automatically, but it does not define clear trigger constraints or approval requirements. Because the skill has exec capability and operational scope, this increases the risk of unintended execution from ambiguous user prompts.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill instructs the agent to start a web service and open a dashboard on localhost without prominently warning that this changes system state and exposes a listening service. Even if bound locally, starting services can affect host security posture, consume resources, or be rebound/misconfigured in ways that broaden exposure.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The batch execution section normalizes large-scale and concurrent operations but lacks a prominent safety warning about irreversible or high-impact changes across many targets. In an agent context, automation plus concurrency can amplify mistakes, causing widespread operational disruption much faster than single-target actions.

Static analysis

No suspicious patterns detected.