ClawHub
Back to skill

Security audit

primevue

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only PrimeVue skill with component examples and no evidence of hidden execution, persistence, or data access.

Before installing, treat this as a PrimeVue reference skill: it may lead your agent to install PrimeVue packages for a Vue project, but it does not need OAuth credentials despite the metadata tag. Only approve package installation or project edits when they match your intended Vue UI work.

SkillSpector

Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Session Persistence

Medium
Category
Rogue Agent
Content
```vue
<Stepper value="1">
    <StepList>
        <Step value="0">Step 1</Step>
        <Step value="1">Step 2</Step>
        <Step value="2">Step 3</Step>
Confidence
75% confidence
Finding
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Session Persistence

Medium
Category
Rogue Agent
Content
<Step value="0">Step 1</Step>
        <Step value="1">Step 2</Step>
        <Step value="2">Step 3</Step>
    </StepList>
    <StepPanels>
        <StepPanel value="0">Content 1</StepPanel>
        <StepPanel value="1">Content 2</StepPanel>
Confidence
75% confidence
Finding
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Static analysis

No suspicious patterns detected.