ClawHub
Back to skill

Security audit

Batch Processing Patterns

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly a batch-processing guide, but it includes crawler guidance for rotating user agents and detecting anti-bot defenses without clear authorization or privacy limits.

Install only if you will use it for authorized batch processing and approved APIs. Do not use the crawler patterns to bypass rate limits, captchas, login gates, robots.txt, or site terms; add explicit privacy and endpoint controls before adapting the remote polling or batch HTTP examples.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill explicitly teaches remote API polling, batch HTTP requests, and long-running network orchestration, but it does not warn users that data, prompts, files, or metadata may be transmitted to third-party services or external hosts. In a reusable agent skill, that omission can cause operators to adopt the pattern without considering privacy, consent, data residency, or logging exposure, especially when processing batches of files or AI requests at scale.

Ssd 4

Medium
Confidence
96% confidence
Finding
The section labeled '反风控策略' provides operational guidance for avoiding or bypassing website defenses, including throttling, response analysis for anti-bot challenges, and user-agent rotation. Even if framed as reliability advice, this materially enables evasion of rate limits and bot-detection controls in crawling or bulk-request workflows, which increases the risk of unauthorized scraping, terms-of-service violations, and abuse against third-party systems.

Static analysis

No suspicious patterns detected.