ClawHub
Back to skill

Security audit

OpenBuddy 电子宠物

Security checks for vulnerabilities and agentic risk

Overview

OpenBuddy is a local terminal pet that stores a small local state file and does not show network access, secret access, or destructive behavior.

Install only if you are comfortable running a local Node script that creates ~/.openbuddy/buddy-soul.json and uses local machine/user environment values to seed pet traits. Set OPENBUDDY_DIR to change the storage path or OPENBUDDY_USER_ID to avoid using the default hostname/username-derived seed.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Context-Inappropriate Capability

Medium
Confidence
90% confidence
Finding
The skill derives a stable identifier from host and username environment variables, or accepts an override via OPENBUDDY_USER_ID, to deterministically generate pet traits. While this appears intended for personalization rather than exfiltration, it collects and uses host/user identity data beyond what is necessary for a local terminal pet and does so without disclosure, creating unnecessary privacy risk and a persistent fingerprint.

Vague Triggers

Medium
Confidence
90% confidence
Finding
The trigger phrases are broad everyday terms such as "buddy", "宠物", and "伙伴", which can overlap with ordinary conversation and cause unintended activation. In an agent setting, accidental invocation can lead to confusing behavior, unplanned command suggestions, or execution of local helper functionality when the user did not intend to use this skill.

Missing User Warnings

Low
Confidence
88% confidence
Finding
The code creates ~/.openbuddy and writes buddy-soul.json without any prior warning or consent prompt. This is low severity, but it can surprise users and violates expectations for transparent stateful behavior in a terminal utility.

Missing User Warnings

Low
Confidence
85% confidence
Finding
The skill reads HOSTNAME/COMPUTERNAME and USER/USERNAME from the environment to derive identity without informing the user. Even though the values stay local in this file, undisclosed collection of system identity is a privacy concern and compounds the persistent fingerprinting behavior.

Static analysis

No suspicious patterns detected.