ClawHub
Back to skill

Security audit

Sirket Kurulus Temel

Security checks for vulnerabilities and agentic risk

Overview

This is an informational Turkish company post-incorporation checklist skill with no executable code or hidden access requests.

Safe to install from an agentic-security perspective. Treat the tax and compliance content as general guidance, and verify deadlines, thresholds, and legal obligations with official Turkish sources or a qualified professional before acting.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
90% confidence
Finding
The trigger condition includes a broad catch-all phrase for essentially any question about post-incorporation processes in Turkey, which can cause the skill to activate outside narrowly intended contexts. This is mainly a quality and routing risk rather than a direct security flaw, but unintended invocation can surface inaccurate or inapplicable procedural guidance to users.

Static analysis

No suspicious patterns detected.