ClawHub
Back to skill

Security audit

rustfs-upload

Security checks for vulnerabilities and agentic risk

Overview

The skill does what it says, but it can publish chosen local files, create remote storage buckets, and persist storage credentials without enough user-facing control or disclosure.

Install only if you are comfortable with this skill uploading selected files to RustFS/S3-compatible storage where the returned link may be public. Use least-privilege credentials, verify the endpoint, bucket, and public domain before running it, and check or remove the rustfs-temp rc alias afterward if you do not want credentials retained. Do not rely on automatic expiration unless your bucket lifecycle policy independently enforces it.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill explicitly uploads local files to remote object storage and returns a public URL, but the description does not present this as a clear user-facing warning or consent boundary. In an agent setting, that omission can cause users to trigger exfiltration of local content or publish sensitive files without understanding that the result is remotely stored and publicly accessible.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The script exfiltrates a user-specified local file to a remote RustFS endpoint and can also create a bucket as a side effect, but it provides no explicit warning, confirmation, or dry-run behavior before doing so. In an agent-triggered skill, this increases the risk of users unintentionally sending sensitive local files or mutating remote storage state without understanding that network transmission and bucket creation will occur.

Static analysis

No suspicious patterns detected.