ClawHub
Back to skill

Security audit

Data Privacy & Protection Program

Security checks for vulnerabilities and agentic risk

Overview

This is a privacy-program guidance skill made of Markdown templates and playbooks, with no hidden execution or persistence behavior found.

Before installing, treat this as a privacy-program checklist and drafting aid, not legal advice. Avoid pasting unnecessary personal data, incident evidence, credentials, or full datasets into the agent, and have qualified privacy counsel review jurisdiction-specific decisions and breach notifications.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
### Cookie Consent Implementation
```
Tier 1 — Strictly Necessary: No consent needed, always on
Tier 2 — Functional: Preferences, language, region
Tier 3 — Analytics: Google Analytics, Hotjar, Mixpanel
Tier 4 — Marketing: Facebook Pixel, Google Ads, retargeting
Confidence
75% confidence
Finding
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Vague Triggers

Medium
Confidence
95% confidence
Finding
The skill ends with a natural-language command list using broad, common phrases such as 'Help with a DSAR', 'We had a data breach', and 'Assess our privacy program'. In agent environments that auto-route or auto-activate skills based on user utterances, these generic triggers can cause unintended invocation, exposing sensitive organizational or incident-response workflows in contexts where the user did not explicitly choose this skill.

Static analysis

No suspicious patterns detected.