ClawHub
Back to skill

Security audit

会议纪要融合生成器

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent meeting-minutes skill that locally turns user-provided PDFs into HTML and PDF outputs without hidden network, credential, or persistence behavior.

Install this if you want a local workflow for turning meeting PDFs into polished minutes. Because meeting transcripts can contain sensitive business information, confirm which PDFs are being processed, choose output filenames deliberately, and review the generated HTML/PDF before sharing.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill instructs writing HTML and PDF files into the user's working directory without clearly warning the user or requiring explicit consent for filesystem writes. Silent file creation can surprise users, overwrite expected outputs, or leak sensitive meeting content into unintended local paths, especially when handling confidential business records.

Static analysis

No suspicious patterns detected.