ClawHub
Back to skill

Security audit

上下文窗口优化器

Security checks for vulnerabilities and agentic risk

Overview

This skill is a simple context-compression guide with no install actions or executable code, though users should review summaries before letting an agent replace conversation history.

Install is reasonable for users who want Chinese-language context summarization guidance. Before using it to compress an active session, ask the agent to show the proposed summary, preserve safety constraints, requirements, approvals, open tasks, and key file paths, and avoid deleting or replacing the full transcript unless you explicitly approve it.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The skill explicitly recommends replacing original conversation history with a compressed version, but it does not require user consent, preservation of the source transcript, or any warning that summarization can omit or distort important facts. In a context-management skill, silent mutation of prior instructions, requirements, or safety constraints can cause the agent to act on altered context and make incorrect or unsafe decisions.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
78% confidence
Finding

The natural-language description is presented entirely in Chinese and does not indicate that users may interact in other languages or opt into this locale. Under the policy, forcing a specific language without user opt-in can be a locale-policy issue unless the constraint is clearly documented and justified.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.