ClawHub
Back to skill

Security audit

OpenClaw Regex Engine

Security checks for vulnerabilities and agentic risk

Overview

The skill is a coherent remote regex tool, but it can send user text to an external MCP service while its privacy wording understates that external disclosure.

Review before installing. Use it only for text you are comfortable sending to the remote MCP service, avoid secrets, credentials, regulated personal data, proprietary code, and confidential documents, and prefer explicit confirmation before invoking the regex tools on pasted content.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Findings (1)

other

Warning
Location
SKILL.md:48
Finding

Remote Processing of User-Supplied Content with Misleading Third-Party Disclosure

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The detection triggers include very broad phrases such as 'regular expression', 'pattern matching', 'capture groups', and 'backreference', which can match ordinary technical discussion rather than an explicit request to use this skill. That can cause the agent to invoke or prioritize this external service unnecessarily, increasing the chance of unintended data disclosure to the MCP endpoint and tool overreach in unrelated conversations.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.