ClawHub
Back to skill

Security audit

my_stock_watchlist_skill

Security checks for vulnerabilities and agentic risk

Overview

This skill is a narrowly scoped DingTalk stock watchlist helper that can add, list, and delete rows in one specified table when the user asks.

Install only if you intend this agent to manage the specified DingTalk table. Because it can add and delete rows, confirm the Base ID, Sheet ID, and field name match your own watchlist before using deletion commands.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Tool Parameter Abuse

High
Category
Tool Misuse
Confidence
80% confidence
Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · SKILL.md (reported line 26)May include surrounding context.

md
- 动作：查询表格中对应的标的行，定位其 `recordId`，然后执行删除操作。
- **执行方式**：
  1. 调用 `dingtalk-ai-table` 获取记录列表 `GET /v1.0/notable/bases/{base_id}/sheets/{sheet_id}/records`，遍历查找到目标标的所在行的 `id`。
  2. 调用删除记录 API `DELETE /v1.0/notable/bases/{base_id}/sheets/{sheet_id}/records/{record_id}` 进行删除。

### 3. 列表查询
- 动作：获取当前所有观察标的，或查询某个标的是否在观察列表中。

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The natural-language instructions define activation phrases only in Chinese and require use of the Chinese field name 标的, but the document does not state that the skill is intentionally Chinese-only or offer any language/locale opt-in. This can violate language/locale policy because it constrains usage to a specific language by default.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
91% confidence
Finding

The description is written only in Chinese, which can constitute a language/locale policy issue when the skill does not indicate that language selection is optional or that the skill is intentionally limited to a Chinese-speaking context. The file provides no opt-in, alternative locale, or justification for the language constraint.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.