ClawHub
Back to skill

Security audit

Raindrop Io

Security checks for vulnerabilities and agentic risk

Overview

This is an unfinished template skill with no executable behavior or sensitive access, so it is not malicious but should be completed before use.

Do not rely on this skill as published: it needs a real description, trigger conditions, workflow, and boundaries. From a security perspective, the inspected package is low risk because it is just placeholder markdown with no code or privileged instructions.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
97% confidence
Finding
The skill description is still a generic TODO, so the skill has no defined scope, activation criteria, or safe usage boundaries. In an agent system, ambiguous or overly broad skill metadata can cause inappropriate invocation, misrouting, or use in contexts the author did not intend, increasing the chance of unsafe behavior.

Vague Triggers

Medium
Confidence
94% confidence
Finding
The markdown body lacks a real overview and operational scope, leaving the skill's purpose and workflow undefined. This makes the skill context more dangerous because there are no guardrails or constraints, so an agent may activate or apply it too broadly based only on a vague title like 'Raindrop Io'.

Static analysis

No suspicious patterns detected.