ClawHub
Back to skill

Security audit

Image Sprout

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent Image Sprout CLI guide with disclosed saved project context and API-key storage, not hidden agent-memory behavior.

Before installing, make sure you trust the separate image-sprout CLI and OpenRouter account usage. Keep the web UI local or on a private network because the skill warns it has no authentication, and remember that reference images, generated outputs, project instructions, and the API key are stored locally by the tool.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Memory PoisoningPersistent Context Injection, Context Window Stuffing, Memory Manipulation
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Persistent Context Injection

Medium
Category
Memory Poisoning
Confidence
80% confidence
Finding

Skill injects content designed to persist in agent memory or context across interactions. Persistent injection can alter agent behavior long after the initial interaction.

Content

Scanner excerpt · SKILL.md (reported line 13)May include surrounding context.

md
# image-sprout

Generate and iterate on images with consistent style and subject identity. Image Sprout turns reusable project context — reference images, derived guides, and persistent instructions — into repeatable outputs.

## 1. OpenRouter Key Setup

Persistent Context Injection

Medium
Category
Memory Poisoning
Confidence
80% confidence
Finding

Skill injects content designed to persist in agent memory or context across interactions. Persistent injection can alter agent behavior long after the initial interaction.

Content

Scanner excerpt · SKILL.md (reported line 50)May include surrounding context.

md
# image-sprout

Generate and iterate on images with consistent style and subject identity. Image Sprout turns reusable project context — reference images, derived guides, and persistent instructions — into repeatable outputs.

## 1. OpenRouter Key Setup

Vague Triggers

Low
Category
Not specified by scanner
Confidence
81% confidence
Finding

The description says to use the skill when an agent or user 'needs repeatable image generation with saved context,' which is a broad natural-language condition rather than a narrowly scoped trigger. The file does not provide explicit invocation phrases, boundaries, or negative examples to distinguish when this skill should or should not be selected.

Content

No source excerpt is available for this finding.