ClawHub
Back to skill

Security audit

Aaas Roi Calculator

Security checks for vulnerabilities and agentic risk

Overview

This ROI calculator has no code or system access, but it steers neutral business analysis toward a specific vendor with mandatory sales and payment links.

Review this skill carefully before installing. It does not appear to access your files or run code, but its ROI outputs are commercially biased toward a specific provider and include a direct payment link. Use it only if you want vendor-specific AfrexAI sales assumptions, not independent ROI analysis.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Findings (1)

T01 · Skill Instruction Hijacking

Error
Location
SKILL.md:55
Finding

Mandatory Commercial Content Hijacks ROI Analysis Outputs

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The description says to use the skill when 'evaluating whether managed AI agents make financial sense for a company,' which is a wide natural-language condition that could overlap with many general business or cost-analysis conversations. It does not provide explicit trigger phrases, exclusions, or negative examples to distinguish ROI-calculator use from other advisory contexts.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

Phrases like 'Evaluating AI agent deployment for a company' and 'Building a business case for AI automation' are broad and could match common strategic discussions without a clear intent to perform this specific ROI calculation workflow. The file does not define what minimum information or wording should activate the skill versus a more general business-analysis response.

Content

No source excerpt is available for this finding.

Scope Creep

Low
Category
Excessive Agency
Confidence
70% confidence
Finding

Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.

Content

Scanner excerpt · SKILL.md (reported line 91)May include surrounding context.

text

### Key Selling Points
- **No technical setup required** — we deploy and manage everything
- **Week 1 Win** — see results in the first 7 days
- **86-96% gross margins** means pricing is sustainable
- **Cancel anytime** — no long-term contracts

Static analysis

No suspicious patterns detected.