Trust Assessment
clawdbot-release-check received a trust score of 68/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 4 findings: 0 critical, 1 high, 3 medium, and 0 low severity. Key findings include Sensitive environment variable access: $HOME, Indirect Prompt Injection via GitHub Release Notes, Insecure Temporary File Creation in Shared Directory.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on August 1, 2026 (commit a4d31ad1). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings4
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Indirect Prompt Injection via GitHub Release Notes The cron job payload instructs the LLM to run `check.sh` and send its output to the user. The output of `check.sh` includes untrusted release notes fetched directly from GitHub. An attacker who controls or compromises the GitHub repository (or publishes a malicious release) can inject instructions into the release notes, which the LLM may execute as system commands or instructions. Sanitize the output of the script before passing it to the LLM, or use strict system prompt framing to instruct the LLM to treat the script output strictly as inert data and never execute instructions contained within it. | LLM | scripts/setup.sh:104 | |
| MEDIUM | Sensitive environment variable access: $HOME Access to sensitive environment variable '$HOME' detected in shell context. Verify this environment variable access is necessary and the value is not exfiltrated. | Static | clawdbot/clawdbot-release-check/scripts/check.sh:7 | |
| MEDIUM | Sensitive environment variable access: $HOME Access to sensitive environment variable '$HOME' detected in shell context. Verify this environment variable access is necessary and the value is not exfiltrated. | Static | clawdbot/clawdbot-release-check/scripts/setup.sh:43 | |
| MEDIUM | Insecure Temporary File Creation in Shared Directory The scripts write to static paths in the shared `/tmp` directory (e.g., `/tmp/cron-updated.json` and `/tmp/cache-update.json`). On multi-user systems, a local attacker can perform a symlink attack to overwrite arbitrary files owned by the user running the script. Use `mktemp` to create secure, unpredictable temporary files (e.g., `tmp_file=$(mktemp)`), and clean them up on exit. | LLM | scripts/setup.sh:49 |
Scan History
Embed Code
[](https://skillshield.io/report/9fa229e7b141e8c2)
Powered by SkillShield