ClawHub
Back to skill

Security audit

Reactivation Specialist

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed email reactivation planning skill that reads user-provided campaign data and saves planning summaries only as part of its stated workflow.

Before installing, treat pasted engagement exports and suppression data as sensitive: avoid including unnecessary personal data, and confirm save actions only when you are comfortable storing campaign, cohort, consent, and suppression planning details in local memory files.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Low
Confidence
78% confidence
Finding
This markdown skill explicitly states it writes a reactivation program and handoff summaries to memory paths and promotes details into shared memory files. While the behavior is documented, it is described operationally rather than as a caution to the user, and the skill also works from engagement exports and suppression-related data that may be sensitive.

Static analysis

No suspicious patterns detected.