ClawHub
Back to skill

Security audit

Arc Text Icon (Upper-Arc Chinese Text)

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward local image-rendering helper with some documentation inconsistencies but no evidence of hidden access, persistence, exfiltration, or unsafe authority.

Install only if you want a local helper for rendering arc-shaped text images. Expect it to create the requested PNG and a white-background preview file, and be aware that some geometry and validation notes in the documentation appear stale, so users should visually verify generated images before relying on them.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
84% confidence
Finding

The manifest description and introductory text frame the skill primarily as generating Chinese arc text icons, including Chinese-specific fonts and trigger phrases, while not explicitly stating that the locale restriction is optional or user-selectable. Under the policy, forcing a specific language or locale without opt-in can be a natural-language policy violation unless clearly justified as region-specific.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The Hard Constraints section says the strong-pixel self-check passes when nonzero alpha > 100 count exceeds 5000. But the changelog states that this alpha-only check was a false-success bug and that the corrected implementation now requires both alpha > 128 and RGB_max < 200. This is an active contradiction about what validation the skill performs.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The documentation in the Core Geometry section states that the arc center (cx, cy) is below the canvas and gives cy = y_top + r. However, the changelog explicitly says this was a bug and that the corrected caller behavior uses cy = y_top. Those two statements cannot both describe the current implementation, so the docs actively contradict the stated code behavior.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The module docstring states the skill renders Chinese/CJK text and the only usage example supplies Chinese text, while the file does not present this as a user-selectable locale option or a clearly justified region-specific constraint. That creates a natural-language locale policy concern because the skill appears to prescribe a specific language by default.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
90% confidence
Finding

The document includes the user-facing example phrase "字距没变" in Chinese, but does not provide an English equivalent on that line or indicate that users can choose their preferred language. This can create an implicit language preference in the skill's natural-language guidance.

Content

No source excerpt is available for this finding.