Setup Automatik

{
  "meta": {
    "document_id": "ssds:auto:setup-automatik:1.0.0",
    "ssds_version": "0.2.0",
    "scanner_version": "0.4.0+fe6fd9123d50",
    "created_at": "2026-03-05T11:04:41.805Z",
    "created_by": {
      "agent": "safeagentskills-cli/generate-ssds"
    },
    "language": "en",
    "notes": "Auto-generated SSDS. Manual review recommended."
  },
  "skill": {
    "name": "Setup Automatik",
    "version": "1.0.0",
    "format": "agent_skill",
    "description": "Facilitate the installation and management of VPS solutions using the Setup Automatik engine (powered by Orion Design). Use when the user wants to install, configure, or manage tools like Traefik, Portainer, Chatwoot, N8N, and other open-source applications on a Linux VPS.",
    "publisher": "ClawHub",
    "source": {
      "channel": "clawhub",
      "slug": "setup-automatik",
      "owner": "alltomatos",
      "downloads": 1425,
      "stars": 0
    },
    "artifact": {
      "sha256": "fbe8532c99f19362f4f16aaab483bc525610a0a46abc18362fffe5958c390206",
      "hash_method": "files_sorted"
    }
  },
  "capabilities": {
    "execution": {
      "can_exec_shell": true,
      "can_exec_code": false,
      "privilege_level": "admin",
      "can_install_deps": false,
      "can_persist": true
    },
    "filesystem": {
      "reads_workspace": true,
      "reads_user_home": true,
      "reads_system": false,
      "writes_workspace": false,
      "writes_user_home": false,
      "writes_system": false,
      "can_delete": true
    },
    "network": {
      "egress": "any",
      "ingress": false
    },
    "credentials": {
      "reads_env_vars": true,
      "reads_credential_files": true,
      "reads_browser_data": true,
      "reads_keychain": true
    },
    "services": [
      {
        "service": "email",
        "operations": [
          "read",
          "write"
        ]
      }
    ],
    "actions": {
      "can_send_messages": false,
      "can_post_public": false,
      "can_purchase": false,
      "can_transfer_money": false,
      "can_deploy": false,
      "can_delete_external": true
    },
    "prompt_injection_surfaces": [
      "web",
      "documents"
    ],
    "content_types": [
      "general"
    ]
  },
  "hazards": {
    "hdac": {
      "H": 4,
      "D": 4,
      "A": 3,
      "C": 1
    },
    "flags": [
      "EXEC",
      "PRIVILEGED",
      "PERSISTENCE",
      "FS_READ_WORKSPACE",
      "FS_READ_USER",
      "FS_DELETE",
      "NET_EGRESS_ANY",
      "CREDS_ENV",
      "CREDS_FILES",
      "CREDS_BROWSER",
      "CREDS_KEYCHAIN",
      "ACT_DELETE_EXTERNAL",
      "PI_WEB",
      "PI_DOCUMENTS"
    ],
    "custom_flags": [
      {
        "code": "PIPE_TO_SHELL",
        "name": "Pipe to Shell",
        "description": "Downloads and executes remote code (curl|bash pattern) in: SKILL.md, assets/SetupOrion.sh"
      },
      {
        "code": "CRED_CLOUD",
        "name": "Cloud Credential Access",
        "description": "Accesses cloud credentials (AWS/GCP/Azure) in: assets/SetupOrion.sh"
      },
      {
        "code": "CRED_KEYCHAIN",
        "name": "Keychain Access",
        "description": "Accesses system keychain in: assets/SetupOrion.sh"
      },
      {
        "code": "HARDCODED_SECRET",
        "name": "Hardcoded Secrets",
        "description": "Contains hardcoded secrets/API keys in: assets/SetupOrion.sh"
      },
      {
        "code": "HIDDEN_INSTRUCTIONS",
        "name": "Hidden Instructions",
        "description": "Contains hidden instructions in comments/invisible chars in: assets/SetupOrion.sh"
      },
      {
        "code": "PERSISTENCE",
        "name": "Persistence Mechanism",
        "description": "Creates scheduled tasks or startup entries in: assets/SetupOrion.sh"
      },
      {
        "code": "PRIVILEGE_ESCALATION",
        "name": "Privilege Escalation",
        "description": "Uses elevated privileges (sudo/root) in: assets/SetupOrion.sh"
      },
      {
        "code": "FILE_DELETE",
        "name": "File Deletion",
        "description": "Can delete files in: assets/SetupOrion.sh"
      },
      {
        "code": "TOOL_ABUSE",
        "name": "Unauthorized Tool Use",
        "description": "INSTRUCTED_BINARY_INSTALL, TOOL_ABUSE_SYSTEM_PACKAGE_INSTALL, TOOL_ABUSE_SYSTEM_MODIFICATION, MCP_SYS_FILE_DESTRUCTION, MCP_SYS_CRITICAL_ACCESS, MCP_SYS_PRIVILEGE_ESCALATION: Instructs agent to install external binary or package"
      },
      {
        "code": "SOCIAL_ENGINEERING",
        "name": "Social Engineering Risk",
        "description": "SOCIAL_ENG_VAGUE_DESCRIPTION: Skill description is too vague or missing"
      },
      {
        "code": "COMMAND_INJECTION",
        "name": "Command Injection Risk",
        "description": "COMMAND_INJECTION_USER_INPUT, TIRITH_INSECURE_TLS: User input used in command substitution - potential injection risk"
      }
    ],
    "confidence": {
      "level": "medium",
      "basis": [
        "static_analysis"
      ],
      "notes": "Detected 11 security patterns (12 vendored rule hits). Review recommended."
    },
    "rationale": {
      "H": "H4: Critical: Privilege escalation or malware detected",
      "D": "D4: Critical: Credential theft or data exfiltration",
      "A": "A3: External actions (deploy/message/post)",
      "C": "C1: General content"
    }
  },
  "containment": {
    "level": "maximum",
    "required": [
      {
        "control": "SANDBOX_CONTAINER",
        "reason": "Code execution capability"
      }
    ],
    "recommended": [
      {
        "control": "LOG_ACTIONS",
        "reason": "Audit trail for all actions"
      }
    ],
    "uncontained_risk": "Risk level depends on manual review of actual capabilities."
  },
  "risks": {
    "risks": [
      {
        "risk": "Pipe-to-shell pattern detected (curl|bash) in: SKILL.md, assets/SetupOrion.sh",
        "severity": "critical",
        "mitigation": "Do not execute. Review source for malicious intent."
      },
      {
        "risk": "Cloud credential access patterns in: assets/SetupOrion.sh",
        "severity": "high",
        "mitigation": "Verify legitimate need for cloud credential access."
      },
      {
        "risk": "Keychain/credential store access in: assets/SetupOrion.sh",
        "severity": "high",
        "mitigation": "Block keychain access or use isolated environment."
      },
      {
        "risk": "Hardcoded secrets detected in: assets/SetupOrion.sh",
        "severity": "high",
        "mitigation": "Remove hardcoded secrets. Use environment variables instead."
      },
      {
        "risk": "Unauthorized tool use: INSTRUCTED_BINARY_INSTALL, TOOL_ABUSE_SYSTEM_PACKAGE_INSTALL, TOOL_ABUSE_SYSTEM_MODIFICATION, MCP_SYS_FILE_DESTRUCTION, MCP_SYS_CRITICAL_ACCESS, MCP_SYS_PRIVILEGE_ESCALATION",
        "severity": "critical",
        "mitigation": "Avoid instructing agents to install arbitrary binaries; bundle dependencies or use sandboxed environments"
      },
      {
        "risk": "Command injection risk: COMMAND_INJECTION_USER_INPUT, TIRITH_INSECURE_TLS",
        "severity": "high",
        "mitigation": "Validate and sanitize all user inputs before using in commands"
      },
      {
        "risk": "Social engineering indicators: SOCIAL_ENG_VAGUE_DESCRIPTION",
        "severity": "low",
        "mitigation": "Provide clear, detailed description of skill functionality"
      }
    ],
    "limitations": [
      "Static analysis only - runtime behavior not verified"
    ]
  },
  "incident_response": {
    "kill_switch": [
      "Stop the agent process"
    ],
    "containment": [
      "Review logs for unexpected actions"
    ],
    "recovery": [
      "Depends on skill capabilities"
    ]
  },
  "evidence": [
    {
      "evidence_id": "EV:file-1",
      "type": "file_excerpt",
      "title": "_meta.json",
      "file_path": "_meta.json"
    },
    {
      "evidence_id": "EV:file-2",
      "type": "file_excerpt",
      "title": "SKILL.md",
      "file_path": "SKILL.md"
    },
    {
      "evidence_id": "EV:file-3",
      "type": "file_excerpt",
      "title": "scripts/list_tools.py",
      "file_path": "scripts/list_tools.py"
    },
    {
      "evidence_id": "EV:file-4",
      "type": "file_excerpt",
      "title": "assets/SetupOrion.sh",
      "file_path": "assets/SetupOrion.sh"
    },
    {
      "evidence_id": "EV:cisco-1",
      "type": "file_excerpt",
      "title": "INSTRUCTED_BINARY_INSTALL [HIGH] SKILL.md:42: 1. Run the installer on your VPS: `curl -fsSL https://get.openclaw.ai | sh`",
      "file_path": "SKILL.md"
    },
    {
      "evidence_id": "EV:cisco-2",
      "type": "file_excerpt",
      "title": "SOCIAL_ENG_VAGUE_DESCRIPTION [LOW] SKILL.md:1: ---",
      "file_path": "SKILL.md"
    },
    {
      "evidence_id": "EV:cisco-3",
      "type": "file_excerpt",
      "title": "COMMAND_INJECTION_USER_INPUT [MEDIUM] assets/SetupOrion.sh:39: nome_servidor=$(grep \"Nome do Servidor:\" \"$dados_vps\" | awk -F': ' '{print $2}')",
      "file_path": "assets/SetupOrion.sh"
    },
    {
      "evidence_id": "EV:cisco-4",
      "type": "file_excerpt",
      "title": "TOOL_ABUSE_SYSTEM_PACKAGE_INSTALL [MEDIUM] assets/SetupOrion.sh:2079: sudo apt-get install -y jq > /dev/null 2>&1",
      "file_path": "assets/SetupOrion.sh"
    },
    {
      "evidence_id": "EV:cisco-5",
      "type": "file_excerpt",
      "title": "TOOL_ABUSE_SYSTEM_MODIFICATION [CRITICAL] assets/SetupOrion.sh:23606: sudo chown -R 1000:1000 /var/lib/docker/volumes/twentycrm${1:+_$1}_docker",
      "file_path": "assets/SetupOrion.sh"
    },
    {
      "evidence_id": "EV:cisco-6",
      "type": "file_excerpt",
      "title": "SECRET_CONNECTION_STRING [HIGH] assets/SetupOrion.sh:5900: - DATABASE_CONNECTION_URI=postgresql://postgres:$senha_postgres@postgres:5432/ev",
      "file_path": "assets/SetupOrion.sh"
    },
    {
      "evidence_id": "EV:cisco-7",
      "type": "file_excerpt",
      "title": "MCP_SYS_FILE_DESTRUCTION [CRITICAL] assets/SetupOrion.sh:16567: sudo rm -r /opt/monitor-orion",
      "file_path": "assets/SetupOrion.sh"
    },
    {
      "evidence_id": "EV:cisco-8",
      "type": "file_excerpt",
      "title": "MCP_SYS_CRITICAL_ACCESS [HIGH] assets/SetupOrion.sh:1: #!/bin/bash",
      "file_path": "assets/SetupOrion.sh"
    },
    {
      "evidence_id": "EV:cisco-9",
      "type": "file_excerpt",
      "title": "MCP_SYS_PRIVILEGE_ESCALATION [CRITICAL] assets/SetupOrion.sh:3552: sudo sed -i \"s/127.0.0.1[[:space:]]localhost/127.0.0.1 $nome_servidor/g\" /etc/ho",
      "file_path": "assets/SetupOrion.sh"
    },
    {
      "evidence_id": "EV:cisco-10",
      "type": "file_excerpt",
      "title": "MCP_SCRIPT_ANSI_DECEPTION [HIGH] assets/SetupOrion.sh:8: echo -e \"                                   \\e[97mVersão do SetupOrion: \\e[32mv.",
      "file_path": "assets/SetupOrion.sh"
    }
  ]
}