ClawHub
Back to skill

Security audit

Car Diagnostics

Security checks for vulnerabilities and agentic risk

Overview

This is a simple car-maintenance advice skill with no executable code or hidden access, though users should treat its repair guidance cautiously.

Installers should understand this skill gives general car advice, not a mechanic's inspection. For brake failure, steering issues, overheating, oil-pressure warnings, fuel smells, electrical burning odors, high-voltage components, lifting a vehicle, or any uncertain repair, stop using the vehicle if needed and consult a qualified mechanic.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill provides automotive troubleshooting and repair guidance, including overheating, oil pressure, braking, and DIY repair advice, without an upfront safety warning about risks of injury, vehicle damage, or when to stop driving and seek professional help. In this context, omission of safety guardrails can lead users to attempt hazardous actions or continue operating an unsafe vehicle based on incomplete guidance.

Static analysis

No suspicious patterns detected.