ClawHub
Back to skill

Security audit

Remote Desktop Support

Security checks for vulnerabilities and agentic risk

Overview

This appears to be a legitimate remote-support skill, but it needs review because it can expose the live desktop while weakening local lock/VNC protections and may not reliably enforce automatic expiry.

Review before installing. Use only for deliberate, short support sessions on the intended Fedora/GNOME environment; run preflight and dry-run first; keep view-only unless control is truly needed; treat the one-click URL as a password; verify the expiry method is active; and always run close followed by status when finished.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The skill changes sensitive local security state during session open/close: it disables idle locking, may unlock the current session, enables GNOME remote desktop, and downgrades VNC protections, but the action output does not present an explicit, prominent runtime warning at the exact moment those changes occur. In a remote-support tool, this context makes the issue more dangerous because the user may focus on getting a support link and miss that workstation lock protections are being temporarily removed.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The code explicitly sets GNOME Remote Desktop VNC encryption to ['none'], disabling transport protection for the local VNC hop without an explicit runtime warning to the user. Although the design intends localhost-only access via Guacamole, this still weakens confidentiality and becomes high impact if local network/firewall assumptions fail, localhost is bridged unexpectedly, or another local process can intercept the session.

Static analysis

No suspicious patterns detected.