ClawHub
Back to skill

Security audit

ostree

Security checks across malware telemetry and agentic risk

Overview

This is a legitimate OSTree administration guide, but it includes high-impact OS deployment and cleanup examples without enough safeguards for users or agents.

Review before installing or using. Treat the commands as administrative examples, not safe defaults: verify the target host and repository, inspect current deployment status, back up configuration, preserve rollback entries, and avoid unattended undeploy or prune operations unless you have tested recovery procedures.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
90% confidence
Finding
These examples include destructive deployment operations such as rollback, undeploy, and switching boot targets, but do not warn that they can remove prior deployments, alter boot behavior, or disrupt a live system. In a system administration skill focused on OSTree, such commands are contextually relevant, but presenting them without validation, backup, or environment-safety guidance increases the chance of accidental misuse.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The guide writes directly to /ostree/repo/config using shell redirection, which can overwrite live repository configuration without prompting or preserving prior contents. This is risky in documentation for privileged system tooling because users may copy-paste it verbatim and unintentionally break repository settings or trust configuration.

Missing User Warnings

High
Confidence
97% confidence
Finding
The automated deployment script performs pull, deploy, undeploy, and prune actions non-interactively against a live OSTree system, which can change the running host's next deployment state and remove recoverability artifacts. In automation form, the risk is higher because users are encouraged to install and execute the script as root without safeguards, preflight checks, confirmation logic, logging, or rollback protections.

VirusTotal

61/61 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.