ClawHub
Back to skill

Security audit

Jadwal Sholat

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward Indonesian prayer-time lookup skill that contacts the disclosed MyQuran API and shows no hidden persistence, credential access, or destructive behavior.

Before installing, understand that city/location keywords, location IDs, dates/months, and timezone values you query may be sent to api.myquran.com. The skill is Indonesian-focused, and the monthly helper currently displays only a 7-day preview rather than a full month.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (10)

Lp3

Medium
Category
MCP Least Privilege
Confidence
91% confidence
Finding
The skill clearly relies on outbound network access to query a third-party API, but it does not declare any explicit tool scope or permissions. This creates a governance and least-privilege gap: consumers of the skill cannot easily see that external network access is required, which can lead to unintended data transmission or policy bypass in stricter environments.

External Transmission

Medium
Category
Data Exfiltration
Content
import urllib.request
from typing import Any, Dict, List, Optional, Tuple

API_BASE = "https://api.myquran.com/v3"
DEFAULT_TZ = "Asia/Jakarta"
Confidence
60% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
import urllib.request
from typing import Any, Dict, List, Optional, Tuple

API_BASE = "https://api.myquran.com/v3"
DEFAULT_TZ = "Asia/Jakarta"
Confidence
60% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
import urllib.request
from typing import Any, Dict, List, Optional, Tuple

API_BASE = "https://api.myquran.com/v3"
DEFAULT_TZ = "Asia/Jakarta"
Confidence
60% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
import urllib.request
from typing import Any, Dict, List, Optional, Tuple

API_BASE = "https://api.myquran.com/v3"
DEFAULT_TZ = "Asia/Jakarta"
Confidence
60% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
import urllib.request
from typing import Any, Dict, List, Optional, Tuple

API_BASE = "https://api.myquran.com/v3"
DEFAULT_TZ = "Asia/Jakarta"
Confidence
60% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
import urllib.request
from typing import Any, Dict, List, Optional, Tuple

API_BASE = "https://api.myquran.com/v3"
DEFAULT_TZ = "Asia/Jakarta"
Confidence
60% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Description-Behavior Mismatch

Medium
Confidence
97% confidence
Finding
The manifest says the skill can provide jadwal sholat for '1 bulan', implying a full monthly schedule. However, the monthly command explicitly limits output to the first 7 days and labels it as a preview, so the implemented behavior is narrower than the stated capability.

Natural-Language Policy Violations

Low
Confidence
91% confidence
Finding
The module docstring and command descriptions are written entirely in Indonesian, and user-facing messages throughout the script also appear only in Indonesian. The policy allows locale constraints when they are explicitly justified, but this file does not state that the skill is intentionally limited to Indonesian-speaking users or offer any language opt-in.

Intent-Code Divergence

Low
Confidence
95% confidence
Finding
The docstring advertises commands 'id-tanggal' and 'id-bulan', but the parser only implements a single 'id-period' subcommand. This is an active documentation-to-code mismatch that can mislead callers about the interface and supported operations.

Static analysis

No suspicious patterns detected.