ClawHub
Back to skill

Security audit

mattress-spec-decoder

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent offline mattress shopping helper with no evidence of hidden data access, persistence, network use, or destructive behavior.

Safe to install for normal use. Treat its mattress durability and warranty advice as consumer guidance, not medical advice; it asks for body measurements and sleep position only so it can compute recommendations locally.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Behavioral ASTexec() Call, eval() Call, Dynamic Import
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Dynamic attribute access via getattr()

Low
Category
Dangerous Code Execution
Confidence
50% confidence
Finding

Dynamic getattr() with a non-literal attribute name can access arbitrary object attributes, potentially bypassing access controls.

Content

Scanner excerpt · scripts/mattress_advisor.py (reported line 227)May include surrounding context.

python
def decode(args):
    spec = {"type": args.type}
    for k in ("memory_density", "base_density", "latex_density"):
        v = getattr(args, k)
        if v is not None:
            spec[k] = v
    if args.coils:

Static analysis

No suspicious patterns detected.