ClawHub
Back to skill

Security audit

本技能用于分析 Java 微服务项目中 Controller 层的完整调用链路，能够自动追溯到 Service、Mapper、Repository 层，并提取完整的 SQL 语句。最终生成结构化的 JSON 文件，便于 API 文档生成、代码审计或架构理解。

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only skill that reads Java project source structure and writes a local JSON analysis file, with no hidden execution, network access, credential use, or persistence beyond the expected output file.

Install only if you are comfortable letting the agent read the relevant Java project source files and write analysis JSON under the configured output path. Choose the output path deliberately, especially in repositories where generated documentation files may be committed.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Natural-Language Policy Violations

Medium
Confidence
93% confidence
Finding
All user-facing natural-language content in the skill manifest and documentation is Chinese, and there is no indication that users may choose another language or that the skill is intended only for a Chinese-language environment. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.

Missing User Warnings

Low
Confidence
83% confidence
Finding
The markdown states that the skill will generate a JSON file in the specified output directory and automatically create the directory if it does not exist. While this describes the behavior, it does not clearly warn users that running the skill modifies the local filesystem, which is the kind of operational impact SQP-2 expects to be disclosed in markdown skill descriptions.

Static analysis

No suspicious patterns detected.