ClawHub
Back to skill

Security audit

业务模块工程师 配置缓存与后台权限

Security checks for vulnerabilities and agentic risk

Overview

This is an instruction-only Weline engineering skill for module configuration, caching, menus, and permissions, with no hidden code or exfiltration behavior found.

Install this for Weline module-specific config, cache, backend menu, and permission work. Before applying changes, review any env/setup commands and permission diffs, and validate outside production when possible because incorrect permission wiring could hide or expose admin functionality.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The invocation guidance includes broad keywords such as env config, cache, menu, and backend permission, which are common across many engineering tasks. This can cause the agent framework to route unrelated requests into this skill, where it may make module configuration, cache, or permission changes outside its intended boundary, increasing the chance of unsafe or incorrect modifications.

Static analysis

No suspicious patterns detected.