ClawHub
Back to skill

Security audit

CRM Manager

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward local CSV CRM that creates and updates a workspace CRM file as part of its stated purpose.

Install only if you are comfortable keeping CRM contacts, notes, phone numbers, emails, and deal values in a plaintext workspace CSV file. Review crm.csv before bulk changes and keep backups for important customer data.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill instructs the agent to create and modify local files in the workspace, including creating `crm.csv` and updating rows, but it does not warn the user that their workspace data will be changed. This creates a risk of silent state changes, accidental overwrites, or undesired persistence of sensitive customer information.

Vague Triggers

Medium
Confidence
91% confidence
Finding
The activation trigger is broad enough that ordinary requests about contacts, pipelines, or reminders could invoke this skill without the user clearly intending local file operations. Because the skill is stateful and writes to a workspace CSV, ambiguous activation can cause unintended reads or modifications to CRM data.

Context-Inappropriate Capability

Low
Confidence
79% confidence
Finding
The skill is described as a local CSV-based CRM with pipeline tracking, but the README adds a callout directing users to an external website for additional products. This external promotional capability is not justified by the stated operational purpose of managing a local CRM.

Static analysis

No suspicious patterns detected.