Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md - `SKILL.md` 与 catalog metadata 是否一致
Security audit
skill 作品集增长审计 · Skill Portfolio Growth Audit
Security checks for vulnerabilities and agentic risk
Overview
This is a portfolio-audit skill that reads public ClawHub and repository evidence to produce user-directed recommendations, with no hidden execution, persistence, or destructive behavior found.
Before installing, be aware that the skill is primarily written for Chinese-language reporting and uses the clawhub CLI plus git to inspect public registry data and repository contents. Review its recommendations as advisory business/product analysis, especially where it says a skill should be merged, stopped, or newly created.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (8)
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The skill description is primarily written in Chinese and does not state that language choice is optional or user-selected. This can constitute a language/locale policy issue because it implicitly constrains interaction language without documenting opt-in, alternatives, or a region-specific justification.
- Content
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
The suggested prompts such as “分析我这个 publisher 下面所有 skill，下一步该优化谁” and especially “不要凭感觉，帮我找下一个值得做的 ClawHub skill” are natural-language requests that could overlap with ordinary brainstorming or advisory conversations. The file does not provide an explicit activation boundary, fixed trigger list, or exclusion examples to clarify when this skill should activate versus when a more general assistant response is appropriate.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
This markdown file presents all user-facing instructions exclusively in Chinese, and there is no indication that the skill is region-specific or that users may opt into another language. That can violate language/locale policy expectations when a skill implicitly forces a specific language without user choice.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
This markdown template forces a specific language/locale for all users by providing all headings and instructions only in Chinese. The policy explicitly flags language or locale constraints when the skill does not offer user choice or opt-in.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 82% confidence
- Finding
The entry at L19 specifies that portfolio decisions must use Chinese terms (
加码 / 修复 / 合并 / 观察 / 停更 / 新建). This is a natural-language locale requirement, and the file does not indicate user opt-in or a documented regional justification for enforcing that language.- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 85% confidence
- Finding
SQP-3 applies to all file types and includes language or locale policy violations. This markdown example presents all user-facing content exclusively in Chinese and does not indicate that language selection is optional or limited to a justified region-specific context.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 86% confidence
- Finding
SQP-3 applies to all file types and includes language or locale policy violations. This markdown file presents all operational guidance only in Chinese, with no indication that the skill is region-specific or that users can opt into this language, which can amount to forcing a specific language without user choice.
- Content
Static analysis
No suspicious patterns detected.