Security audit

TTS Media Route Fix

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed OpenClaw gateway repair skill with real operational risk, but the behavior is coherent with its stated purpose and not deceptive.

Install only if you intend to repair a local OpenClaw gateway. Review the target file and diff before patching, keep the backup, restart deliberately, and avoid placing real Bearer tokens in shell history, logs, or process-visible commands.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 85% confidence
Finding: The skill instructs the agent to execute shell commands that modify installed hashed dist JavaScript files, create backups, restart the gateway, and run curl-based verification, but no explicit permissions are declared. This creates a real security concern because a caller may invoke powerful local code-execution and service-modification behavior without clear sandboxing or operator approval boundaries, increasing the risk of unauthorized file tampering or operational disruption.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The script requires a Bearer token as a positional command-line argument, which can expose the secret through shell history, process listings, audit logs, or orchestration tooling. In this skill’s context, the token is intended for authenticated media-route verification, so the behavior is operationally useful but still creates a real credential-handling weakness.

Static analysis

No suspicious patterns detected.