ClawHub
Back to skill

Security audit

qiyue-xiaoliuren-drawer

Security checks for vulnerabilities and agentic risk

Overview

The skill does what it claims: it calls a public QiyueAstro divination API, with the main privacy caveat that questions and dates are sent to that service.

Install only if you are comfortable sending the question text and optional date to qiyueastro.com. Avoid including sensitive personal, medical, financial, or relationship details in the question field, and expect the skill to append a link back to QiyueAstro after results.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The README explicitly states that the user's question and date are sent to a public remote API, but it does not clearly warn users about third-party data transmission, retention, or privacy implications. Even if the data seems low sensitivity, free-form questions can contain personal or sensitive information, so lack of disclosure can lead to unintended exposure.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill sends the user's `question` to a third-party API and the documentation explicitly states that the value is echoed back in the response, but it does not warn users about this data disclosure. This creates a privacy risk because users may submit sensitive personal, medical, financial, or relationship information to an external service without informed consent.

Static analysis

No suspicious patterns detected.