ClawHub
Back to skill

Security audit

Serp Analysis

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed SERP-analysis skill that fetches or uses search-result evidence and may save reusable SEO research notes, with no artifact-backed signs of deception or unsafe behavior.

Install only if you are comfortable with the agent using web/SERP data sources and saving durable SEO research summaries into memory. Review saved memory notes if you do not want keyword priorities, competitor facts, or strategy decisions reused in later sessions.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Description-Behavior Mismatch

Medium
Category
Not specified by scanner
Confidence
84% confidence
Finding

The manifest description frames this skill as an analysis tool for mapping SERP features, ranking factors, and intent for a query. However, the skill contract says it writes reusable summaries and promotes keyword priorities, competitor facts, and strategy decisions into shared memory files, which expands the behavior from analysis into persistent cross-skill knowledge management and planning.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The trigger description says PAA applies to "Almost all informational and commercial investigation queries," which is an expansive natural-language condition without boundaries or exclusions. In a markdown reference file, this kind of broad trigger guidance can cause over-application because it does not clarify when the feature should not be considered.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Low
Category
Not specified by scanner
Confidence
80% confidence
Finding

The file presents 'How has the SERP for [keyword] changed over time?' as a supported analysis mode. Yet the listed sources and instructions only describe current keyless search results, screenshots, or provided URLs, with no documented historical archive or time-series SERP source beyond limited freshness flags, so the claimed capability is not supported by the described implementation guidance.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.