ClawHub
Back to skill

Security audit

Json Modifier

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward JSON patching utility with one dependency and a test-script weakness, but no evidence of hidden or malicious behavior.

Reasonable to install if you need a CLI helper for JSON patching. Review patches before applying them because the tool can overwrite any JSON file you point it at, and consider pinning dependencies exactly and hardening the test script before using it in CI or other sensitive automation.

A.I.G

Vulnerability Patterns
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T09 · Insecure Skill Coding Practices

Warning
Location
scripts/test.js:24
Finding

Shell Command Injection Through an Unquoted Project Path in the Test Runner

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Unpinned Dependencies

Low
Category
Supply Chain
Confidence
93% confidence
Finding

The dependency is specified with a caret range (^3.1.1), which allows automatic installation of newer compatible versions. This creates supply-chain risk because future releases could introduce malicious code or breaking security changes without an explicit review, even though the current package and the skill’s stated purpose appear benign.

Content

Scanner excerpt · package.json (reported line 10)May include surrounding context.

json
"test": "node scripts/test.js"
  },
  "dependencies": {
    "fast-json-patch": "^3.1.1"
  },
  "author": "OpenClaw Evolution",
  "license": "ISC"

Static analysis

Detected: suspicious.dangerous_exec

Shell command execution detected (child_process).

Critical
Code
suspicious.dangerous_exec
Location
scripts/test.js:27