ClawHub
Back to skill

Security audit

Git Security Scanner & Repo Health Auditor

Security checks for vulnerabilities and agentic risk

Overview

GitGuard appears to be a disclosed, read-only repository auditing tool; the main caution is ordinary dependency hygiene, not hidden or malicious behavior.

Install this only for repositories you intend to audit, because it will read source files and git metadata in the paths you provide. Use a GitHub token only if you want higher-rate read-only GitHub triage, and consider pinning or constraining requests in your environment before installation.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
91% confidence
Finding
The skill advertises operational capabilities that include environment access, file reads, network access, and shell usage, but it does not declare permissions or constraints for those behaviors. That creates a trust and review gap: an agent or user may invoke a tool that can inspect local repositories, read tokens from the environment, and execute git or other shell commands without an explicit capability declaration or minimization boundary.

Unpinned Dependencies

Low
Category
Supply Chain
Content
requests>=2.28.0
Confidence
96% confidence
Finding
The dependency is specified with a lower-bound only constraint (`requests>=2.28.0`), which makes builds non-reproducible and can pull in unexpected versions over time. While not an exploit by itself, unpinned dependencies increase supply-chain risk and can also allow installation of vulnerable versions such as 2.28.0, especially in fresh environments.

Known Vulnerable Dependency: requests==2.28.0 — 8 advisory(ies): CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi); CVE-2026-25645 (Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility func) +5 more

High
Category
Supply Chain
Confidence
89% confidence
Finding
The requirement allows installation of `requests==2.28.0`, a version with multiple known advisories, because `>=2.28.0` includes that vulnerable release. In a security-scanning skill that may access local repositories and optionally query remote APIs, a vulnerable HTTP client library increases the risk of credential leakage, request validation flaws, or other network-related compromise depending on how the package is used.

Static analysis

No suspicious patterns detected.