Security audit
Security checks for vulnerabilities and agentic risk
This looks like a legitimate WebSocket implementation guide, but its install instructions rely on mutable external commands that should be reviewed before use.
Review the skill content before installing, and prefer pinned, reviewed installer versions and immutable source references instead of running npx commands that resolve latest packages or GitHub main branches. The WebSocket/Redis patterns themselves are purpose-aligned, but adoption should include normal review of Redis data contents, channel naming, retention, and access controls.
SKILL.md:15Unpinned ClawHub Package Execution in Skill Installation Instructions
README.md:24Mutable GitHub Source Installed Through an Unpinned npm Executable
README.md:30Unpinned ClawHub Package Execution in README Installation Instructions
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
- Hub main loop for connection register/unregister/broadcast
- Lazy Redis subscriptions (subscribe only when first local client joins)
- Redis message forwarding to local WebSocket connections
- Connection write pump with ping/pong and batch draining
- Connection registry for horizontal scaling across instances
- Graceful shutdown with proper cleanup
The README instructs users to run npx add against a remote GitHub path without pinning to an immutable version, commit, or checksum. This creates a supply-chain risk because the referenced package or installer behavior can change over time, allowing future malicious or compromised content to be executed by users following the documentation.
The command npx clawhub@latest install websocket-hub-patterns explicitly uses the floating latest tag, which can resolve to different code over time. If the package is compromised or a breaking/malicious update is published, users following the README may execute unreviewed code on their systems.
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
From your project root:
mkdir -p .claude/skills
cp -r ~/.ai-skills/skills/realtime/websocket-hub-patterns .claude/skills/websocket-hub-patterns
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
mkdir -p ~/.claude/skills
cp -r ~/.ai-skills/skills/realtime/websocket-hub-patterns ~/.claude/skills/websocket-hub-patterns
Skill selects an external model or provider that may use a different account or billing plan than the operator expects. Undisclosed model switches can cause unexpected cost or quota consumption.
---
name: websocket-hub-patterns
model: standard
description: Horizontally-scalable WebSocket hub pattern with lazy Redis subscriptions, connection registry, and graceful shutdown. Use when building real-time WebSocket servers that scale across multiple instances. Triggers on WebSocket hub, WebSocket scaling, connection registry, Redis WebSocket, real-time gateway, horizontal scaling.
---
The installation command uses npx clawhub@latest, which fetches and executes the most recent package version at install time. This creates a supply-chain risk because a compromised upstream package, typosquat, or malicious newly-published version would be executed by users without review; the skill context makes this more dangerous because it explicitly instructs installation/execution of external tooling.
No suspicious patterns detected.