ClawHub
Back to skill

Security audit

remember-customer-names

Security checks for vulnerabilities and agentic risk

Overview

This skill openly supports remembering customer context, but it does so by sending and persistently storing broad customer personal details with insufficient privacy controls.

Review this skill before installing in any customer-facing environment. Only use it if BlueColumn is an approved processor for your organization, the API key is scoped appropriately, and you have policies for customer consent, sensitive-data filtering, retention, access, and deletion. Avoid storing family details or other personal-life information unless there is a clear, authorized business need.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Findings (1)

other

Error
Location
SKILL.md:14
Finding

Uncontrolled Collection and External Transmission of Customer Personal Data

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (5)

Missing User Warnings

High
Category
Not specified by scanner
Confidence
98% confidence
Finding

The skill explicitly instructs sending personally identifiable and contextual customer data to an external endpoint, including family information and other personal details, without any consent, minimization, retention, or privacy warning. This creates a substantial risk of privacy-law violations, unauthorized third-party disclosure, and improper processing of sensitive relationship data.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

The phrase 'Use when an agent talks to customers and should address them correctly and remember their context' is broad and could match a wide range of ordinary customer interactions without clear boundaries. The file does not provide specific trigger phrases, exclusions, or negative examples to constrain when the skill should or should not be invoked.

Content

No source excerpt is available for this finding.

Ssd 3

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The skill directs persistent storage and future reuse of personal customer context, including nonessential human details, which goes beyond simple contact management and risks building shadow profiles. Retaining and resurfacing this information in future interactions can expose private facts unexpectedly, amplify harm from breaches, and violate internal data-governance limits.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
99% confidence
Finding

This example transmits detailed customer information to an external Supabase-hosted function using an API key, including role, employer, buying authority, hobbies, and family context. The skill context makes this more dangerous because the transfer is presented as a standard workflow for customer interactions, encouraging routine exfiltration of PII to a third-party service without visible safeguards.

Content

Scanner excerpt · SKILL.md (reported line 15)May include surrounding context.

Store the essentials the first time you meet someone: name, how they like to be addressed, role, company, and one human detail.

bash
curl -X POST https://xkjkwqbfvkswwdmbtndo.supabase.co/functions/v1/agent-remember \
  -H "Authorization: Bearer $BLUECOLUMN_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"text": "CUSTOMER CARD: Jane Almeida, VP Ops at Acme Corp. Goes by Jane. Decision-maker for the account. Mentioned she runs marathons; son starts college in the fall.", "title": "customer - Jane Almeida"}'

Ssd 3

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The workflow encourages continuous capture of personal and situational details like family, projects, and constraints for later reuse, normalizing ongoing behavioral profiling. In this skill context, that makes the issue more dangerous because the data is intended to accumulate over time and be operationalized in conversations, increasing privacy, compliance, and misuse risk.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.