Back to skill

Security audit

IceCube Monetize CN

Security checks for vulnerabilities and agentic risk

Overview

This is a Markdown-only monetization guide for Chinese RMB collection and OpenClaw-related services, with no executable code or hidden system access.

Before using this skill for real monetization, verify platform rules, advertising limits, tax obligations, invoicing, refunds, contracts, and payment compliance for your jurisdiction. Treat its revenue estimates and compliance statements as planning ideas, not legal or tax advice.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The trigger description uses broad phrases such as '知识付费', '人民币收款', and '没有海外账户', which can match many ordinary monetization or payment-related user requests outside the narrow OpenClaw/IceCube context. This can cause the skill to activate in unintended situations and steer users into financial guidance, marketing funnels, or platform-specific advice that is not actually relevant to their request.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The skill promotes direct payment collection, private-domain conversion, and service monetization workflows while presenting them as '合规安全' and '无中间环节' without meaningful warnings about tax, invoicing, advertising, consumer protection, platform rules, or local financial compliance. In practice, this can mislead users into treating business, payment, and solicitation tactics as universally safe, increasing the risk of policy violations, disputes, or non-compliant commercial activity.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.