Security audit

Lobu

Security checks for vulnerabilities and agentic risk

Overview

The package contains disclosed workflow skills for code review, Convex development, ClawHub moderation, and documentation work, with high-impact actions gated by user confirmation and existing authentication.

Install only if you expect these staff and development workflows. Be especially careful before using the ClawHub admin skills or autoreview helper: confirm the exact target, command, recipient, and data being sent to external AI or production admin APIs.

Static analysis

Detected: suspicious.dangerous_exec, suspicious.env_credential_access, suspicious.potential_exfiltration

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: dist/index.js:351
Evidence: // `spawn()` can throw synchronously for some failures, but missing

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: dist/index.js:251
Evidence: const webUrl = asString(cfg.webUrl) ?? asString(process.env.LOBU_WEB_URL);

Sensitive-looking file read is paired with a network send.

Warn

Code: suspicious.potential_exfiltration
Location: dist/index.js:154
Evidence: const raw = readFileSync(getTokenStorePath(), 'utf-8');