ClawHub
Back to skill

Security audit

节点工作工具专业版

Security checks for vulnerabilities and agentic risk

Overview

This skill is not malicious, but it asks for broad command and file access for cluster, wallet, and environment operations while using overly broad triggers and thin user-control guidance.

Install only if you intend to let an agent help with node cluster operations. Before use, require explicit confirmation for any command execution, .env/API-key access, wallet configuration, deployment, auto-restart, or persistent monitoring change, and use least-privilege keys plus backups for configuration files.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
91% confidence
Finding
The trigger condition is broad enough to activate on generic project management, planning, tracking, and collaboration requests that are not specific to this skill’s stated cluster-management purpose. Because the skill exposes read/exec/write capabilities and discusses wallets, configuration, and deployment actions, over-triggering increases the chance that the agent will invoke it in unrelated contexts and perform unsafe operational steps without clear user intent.

Missing User Warnings

High
Confidence
95% confidence
Finding
The skill describes operations involving shared wallets, cluster deployment, environment reuse, and centralized management but does not warn users about the risks of modifying credentials, wallet settings, or system configuration. In an agentic setting, this omission is dangerous because users may authorize actions without understanding that secrets, funds, or host state could be affected.

Static analysis

No suspicious patterns detected.