ClawHub
Back to skill

Security audit

Solo Workflow Engine Free

Security checks for vulnerabilities and agentic risk

Overview

This skill is mainly no-code automation guidance, but it asks for broad command execution and encourages connecting high-impact business accounts without enough safety scoping.

Install only if you are comfortable with a skill that may be selected for broad automation tasks and has shell execution available. Before following its workflow advice, review every connected app permission, use least-privilege accounts, test with non-sensitive data, verify field mappings and destinations, and keep a plan to disable automations and revoke OAuth/API access.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Context-Inappropriate Capability

Medium
Confidence
93% confidence
Finding
The skill declares `exec` even though its stated purpose is guidance for no-code workflow design, not local command execution. This unnecessarily expands the agent's capability surface and could enable unintended shell/network actions if the skill or downstream prompts cause the agent to use command-line tools.

Vague Triggers

Medium
Confidence
87% confidence
Finding
The skill advertises overly broad keywords and unclear invocation boundaries, increasing the chance it is selected for unrelated tasks. In an agent ecosystem, ambiguous routing can cause the wrong skill to handle sensitive requests, leading to inappropriate guidance, unnecessary tool use, or accidental exposure of connected-service context.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill instructs users to connect accounts and automate flows involving forms, CRM, email, payment, and spreadsheets, but it does not clearly warn about OAuth scope, secret handling, personal data transfer, or misrouting risks. That omission can lead users to grant excessive permissions or move sensitive data across services without informed consent or minimization.

Static analysis

No suspicious patterns detected.