ClawHub
Back to skill

Security audit

cloudflare-drop

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent Cloudflare static-site deployment helper, with expected network upload behavior and sensible user-consent and claim-URL handling.

Install only if you intend to publish the selected static directory to a Cloudflare workers.dev URL. Use it with a trusted, stable directory containing only public files, review Cloudflare terms before accepting, and keep the claim URL file private.

A.I.G

Vulnerability Patterns
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T09 · Insecure Skill Coding Practices

Warning
Location
scripts/deploy.mjs:124
Finding

Time-of-check to time-of-use race can upload unintended local files

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Undeclared Tool Scope

Medium
Category
MCP Least Privilege
Confidence
88% confidence
Finding

The skill instructs the agent to perform a networked deployment to Cloudflare Workers but does not declare any explicit tool scope or allowed-tools boundary. That omission weakens policy enforcement and reviewability, because an agent/runtime may permit broader network access than intended or fail closed/open inconsistently when executing the deployment flow.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · scripts/deploy.mjs (reported line 22)May include surrounding context.

js
} from "node:fs";
import { extname, join } from "node:path";

const API_BASE = "https://api.cloudflare.com/client/v4";
const MAX_FILES = 1_000;
const MAX_WORKER_SCRIPT_BYTES = 2 * 1024 * 1024;