pocket-ai

clawhub:pocket-ai

View source

44/100

First Seen

Feb 19, 2026

Last Scanned

Feb 22, 2026

Findings

Score

44/100

MEDIUM 7

LOW 1

Findings (8)

MEDIUM

Sensitive file read pattern EXFIL_002

exfiltration L23

Detects reads of sensitive system or credential files

cat ~/.config

FIX

Prevent the tool from reading environment variables and sending them to external endpoints. If env access is needed, restrict it to specific variable names via an allowlist.

FP?

Likely FP if the match is documentation about how to configure environment variables, not code that reads and transmits them.

MEDIUM

Sensitive file read pattern EXFIL_002

exfiltration L39

Detects reads of sensitive system or credential files

cat ~/.config

FIX

Prevent the tool from reading environment variables and sending them to external endpoints. If env access is needed, restrict it to specific variable names via an allowlist.

FP?

Likely FP if the match is documentation about how to configure environment variables, not code that reads and transmits them.

MEDIUM

Sensitive file read pattern EXFIL_002

exfiltration L47

Detects reads of sensitive system or credential files

cat ~/.config

FIX

Prevent the tool from reading environment variables and sending them to external endpoints. If env access is needed, restrict it to specific variable names via an allowlist.

FP?

Likely FP if the match is documentation about how to configure environment variables, not code that reads and transmits them.

MEDIUM

Sensitive file read pattern EXFIL_002

exfiltration L53

Detects reads of sensitive system or credential files

cat ~/.config

FIX

Prevent the tool from reading environment variables and sending them to external endpoints. If env access is needed, restrict it to specific variable names via an allowlist.

FP?

Likely FP if the match is documentation about how to configure environment variables, not code that reads and transmits them.

MEDIUM

Sensitive file read pattern EXFIL_002

exfiltration L59

Detects reads of sensitive system or credential files

cat ~/.config

FIX

Prevent the tool from reading environment variables and sending them to external endpoints. If env access is needed, restrict it to specific variable names via an allowlist.

FP?

Likely FP if the match is documentation about how to configure environment variables, not code that reads and transmits them.

MEDIUM

Sensitive file read pattern EXFIL_002

exfiltration L65

Detects reads of sensitive system or credential files

cat ~/.config

FIX

Prevent the tool from reading environment variables and sending them to external endpoints. If env access is needed, restrict it to specific variable names via an allowlist.

FP?

Likely FP if the match is documentation about how to configure environment variables, not code that reads and transmits them.

MEDIUM

Sensitive file read pattern EXFIL_002

exfiltration L229

Detects reads of sensitive system or credential files

cat ~/.config

FIX

Prevent the tool from reading environment variables and sending them to external endpoints. If env access is needed, restrict it to specific variable names via an allowlist.

FP?

Likely FP if the match is documentation about how to configure environment variables, not code that reads and transmits them.

LOW

Shell script file execution CMDEXEC_013

command-execution L228

Detects execution of shell script files via bash/sh command or direct invocation

./search.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.