ClawHub
Back to skill

Security audit

Her Agent Dashboard

Security checks for vulnerabilities and agentic risk

Overview

This is a local dashboard that may read your OpenClaw diary and learning-note folders for dashboard metrics, but it does not show evidence of stealing data or taking over your system.

Install only if you are comfortable with a local dashboard updater reading OpenClaw diary and learning-note files. Review the generated HTML before sharing it, and be aware that opening the page loads D3.js from a public CDN.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Description-Behavior Mismatch

Medium
Confidence
93% confidence
Finding
The script is configured to read from external diary, library, and learnings paths that are outside the dashboard's own directory. For a dashboard skill whose stated purpose is display, this broad data access creates unnecessary exposure of unrelated user content and violates least-privilege expectations, even though this file currently only uses part of those paths.

Context-Inappropriate Capability

Medium
Confidence
97% confidence
Finding
This function enumerates and reads personal diary markdown files, extracting metadata to populate the dashboard. Accessing diary contents is highly sensitive and not clearly necessary for a generic dashboard viewer, so the capability could expose private user information if the dashboard is opened, shared, or later extended to render more of the file content.

Context-Inappropriate Capability

Low
Confidence
88% confidence
Finding
The script reads note files from an external library workspace to count or extract titles for dashboard display. While less sensitive than diary access, it still reaches beyond the dashboard's own scope and creates avoidable data coupling and privacy exposure if those titles contain confidential information.

Static analysis

No suspicious patterns detected.