ClawHub
Back to skill

Security audit

抖音-极速上货助手 | 青虎AI

Security checks for vulnerabilities and agentic risk

Overview

The skill coherently supports Douyin shop listing and editing, with clear user confirmations, though it can affect live shop data and may save exported data locally.

Install only if you intend to let the agent help manage Douyin shop listings through Qinghu and Xiaofeng ERP. Confirm the target account, template, links, and edits carefully because actions may affect live store data, consume Qinghu credits, and create local export/cache files containing business records.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill’s trigger description includes very broad commerce terms like ‘上货’, ‘上架’, ‘商品编辑’, and ‘批量’, which increases the chance of accidental invocation in unrelated shopping or listing workflows. In this skill, unintended invocation is more dangerous than usual because the skill can perform real external actions against ERP and store-listing systems, potentially leading to unauthorized listing, editing, or user confusion around consent and billing.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The skill instructs automatic export of datasets and reuse of locally cached files without an explicit user-facing warning or consent about writing data to local storage. Because the data may include product, account, or operational business records, silent local persistence can create privacy, retention, and cross-session exposure risks, especially on shared or managed environments.

Content

No source excerpt is available for this finding.